Senior FedRAMP ISSO | End-to-End Compliance Lead

Cribl; Denver (CO); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental & Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture, compliance operations, and continuous monitoring for our FedRAMP Moderate cloud environment. You will define how we do it and build smarter, faster compliance using AI and automation in partnership with engineering, product, legal, and federal customers.

You’ll lead SSP updates, POA&M, annual 3PAO assessments, and monitoring programs, while translating evolving guidance into actionable steps.

Qualifications

• 5+ years information security experience
• 3+ years dedicated FedRAMP ISSO/ISSE at a Cloud Service Provider
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP baseline
• Experience authoring and maintaining large-scale System Security Plans (SSP)

Responsibilities

• Own the FedRAMP program end-to-end: single accountable leader for FedRAMP Moderate authorization
• Maintain and defend the System Security Plan (SSP) with accurate architecture and control mappings
• Drive POA&M management from finding to closure with remediation timelines
• Lead continuous monitoring: ConMon, vulnerability review, configuration management, incident reporting
• Identify opportunities to automate evidence collection and streamline reporting cycles
• Run annual 3PAO assessments: documentation, logistics, evidence collection
• Assess security impact of system changes through change management process
• Serve as primary federal point of contact with agency customers and AOs
• Collaborate with engineering and DevOps on security controls and remediation
• Develop secure automation and IaC workflows to improve compliance
• Coordinate security incident response with the SOC team
• Translate evolving federal guidance (NIST, FedRAMP, OMB) into actionable directions
• Remote-first work across time zones, occasional hours outside standard schedule

Skills

FedRAMP ISSO

SSP ownership

POA&M management

Continuous monitoring

3PAO coordination

Automation scripting

Cloud security

AWS GovCloud

Azure Gov

Written communication

Auditor liaison

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture, compliance operations, and continuous monitoring for our FedRAMP Moderate cloud environment. You will define how we do it and build smarter, faster compliance using AI and automation in partnership with engineering, product, legal, and federal customers.

You’ll lead SSP updates, POA&M, annual 3PAO assessments, and monitoring programs, while translating evolving guidance into actionable steps.