Senior FedRAMP ISSO - Remote Cloud Compliance Leader

Cribl; San Francisco (CA); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health, dental, vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate authorization. You will lead SSP creation, continuous monitoring, and POA&M lifecycle, working with engineering, product, legal, and federal customers to keep our authorization healthy.

You will partner across teams to implement automation, AI-assisted workflows, and secure evidence collection, ensuring timely remediation and clear auditor communications.

Qualifications

• 5+ years in information security, with 3+ in a dedicated FedRAMP ISSO/ISSE role at a Cloud Service Provider.

Responsibilities

• Own the FedRAMP program end-to-end: SSP, continuous monitoring, POA&M lifecycle, and agency relationships.
• Maintain and defend the System Security Plan reflecting architecture, controls, and automation usage.
• Drive POA&M management from finding to closure with tracking, remediation timelines, and reporting workflows.
• Lead continuous monitoring: monthly/annual ConMon, vulnerability triage, config reviews, incident reporting per FedRAMP.
• Identify automation opportunities to streamline evidence collection and reporting cycles.
• Coordinate annual 3PAO assessments from start to finish with evidence and auditor inquiries.
• Assess security impact of system changes ensuring no unreviewed gaps.
• Serve as the federal POC with agency customers, AOs, and the FedRAMP PMO.
• Collaborate with engineering/DevOps on security control implementation and remediation.
• Explore secure automation, IaC integrations, and AI-assisted workflows.

Skills

Information security

FedRAMP

NIST SP 800-53 Rev 5

Automation/AI tooling

Technical writing

Tools

Scripting languages

Automation tooling

LLMs

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate authorization. You will lead SSP creation, continuous monitoring, and POA&M lifecycle, working with engineering, product, legal, and federal customers to keep our authorization healthy.

You will partner across teams to implement automation, AI-assisted workflows, and secure evidence collection, ensuring timely remediation and clear auditor communications.