Senior FedRAMP ISSO — Remote Compliance Leader

Cribl; Raleigh (NC); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) matching

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive our Moderate authorization program across the cloud environment. You will lead the SSP, PMO, and continuous monitoring, coordinating with engineering, product, and federal customers to keep the authorization healthy and our customers confident.

You’ll apply automation and AI to evidence collection, risk assessment, and reporting, while managing 3PAO assessments and ensuring post‑authorization compliance.

Qualifications

• 5+ years of information security experience with at least 3 years in a dedicated FedRAMP ISSO/ISSE role
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP baseline
• Proven experience authoring and maintaining large-scale System Security Plans (SSPs)
• Hands-on POA&M management: opening, tracking, aging, escalation, closure
• Experience running a continuous monitoring program and coordinating 3PAO assessments
• Experience working with 3PAOs through full assessment cycles
• Automation, scripting, or AI tools to improve compliance operations
• Fluency to direct security workflows without being an engineer
• Familiarity with cloud environments (AWS GovCloud strongly preferred)
• Strong written communication suitable for federal auditors

Responsibilities

• Own the FedRAMP program end-to-end: single accountable leader for Moderate authorization, SSP, and POA&M lifecycle
• Maintain and defend the System Security Plan reflecting architecture, controls, and automation usage
• Drive POA&M management from findings to closure with engineering collaboration
• Lead continuous monitoring: monthly/annual ConMon, vulnerability triage, config management reviews
• Identify opportunities to automate evidence collection and streamline reporting cycles
• Run annual 3PAO assessments: documentation, logistics, evidence collection
• Assess security impact of changes to ensure no unreviewed compliance gaps
• Serve as primary federal point of contact with agency customers, AOs, and FedRAMP PMO
• Collaborate with engineering/DevOps on control implementation and remediation
• Develop secure automation / IaC workflows to improve compliance tooling
• Coordinate security incident response with security operations per FedRAMP
• Translate evolving federal guidance into actionable team direction
• Remote-first environment with occasional duties outside normal hours

Skills

FedRAMP ISSO experience

NIST SP 800-53 Rev 5

SSP ownership

POA&M management

ConMon reporting

3PAO coordination

Automation / AI in compliance

Cloud security

AWS GovCloud / Azure / GCP

Technical documentation

Job description

Cribl is seeking a FedRAMP ISSO to own and drive our Moderate authorization program across the cloud environment. You will lead the SSP, PMO, and continuous monitoring, coordinating with engineering, product, and federal customers to keep the authorization healthy and our customers confident.

You’ll apply automation and AI to evidence collection, risk assessment, and reporting, while managing 3PAO assessments and ensuring post‑authorization compliance.