Senior FedRAMP ISSO & GRC Lead (Hybrid)

Semperis; Phoenix (AZ); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP certification and ongoing compliance for 20x authorization. You will guide control implementation, evidence collection, and continuous monitoring across cloud environments in a hybrid setting with teams spanning product, engineering, and risk.

You will define certification boundaries, align governance with stakeholders, and drive automation of evidence pipelines while coordinating with FedRAMP reviewers

Qualifications

• 6+ years in GRC, information security, or IT audit with FedRAMP ISSO exposure.
• Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization.
• Experience working with cloud platforms (Azure, AWS) and security tooling.

Responsibilities

• Lead FedRAMP 20x program for in-scope product(s) and establish governance.
• Collaborate with ISSM to staff required FedRAMP roles for the project.
• Deliver a published work plan and governance gates for audits and cert timelines.
• Design and operate the FedRAMP Trust Center, Security Inbox, and OSSCAL evidence pipeline.

Skills

ISSO experience

FedRAMP

GRC leadership

Cloud security

SDLC security integration

Tools

CSPM

IAM

SIEM

CI/CD

Vulnerability scanning

OSCAL

Job description

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP certification and ongoing compliance for 20x authorization. You will guide control implementation, evidence collection, and continuous monitoring across cloud environments in a hybrid setting with teams spanning product, engineering, and risk.

You will define certification boundaries, align governance with stakeholders, and drive automation of evidence pipelines while coordinating with FedRAMP reviewers