Senior FedRamp ISSO

What you'll do

• Own the FedRAMP program, including the SSP, POA&M lifecycle, continuous monitoring, and agency relationships.
• Manage annual 3PAO assessments, vulnerability findings, change reviews, and incident reporting; coordinate remediation with engineering.
• Improve compliance operations using automation and AI, including evidence collection, reporting, and AI-assisted triage.

What they ask for

• 5+ years of information security experience, including at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Working knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline; experience authoring and maintaining large-scale SSPs and managing POA&Ms.
• Experience leading continuous monitoring and coordinating annual 3PAO assessments, including evidence gathering and auditor facilitation.
• Active CISSP, Certified Authorization Professional (CAP/CGRC), or CISM certification.

Nice to have

• AWS GovCloud experience; Azure Government or GCP also valued.
• Experience with FedRAMP High, IL4, or IL5; OSCAL; compliance-as-code, infrastructure-as-code security scanning, or DevSecOps; AI/ML assessment; GRC platforms; DISA STIGs; or federal security clearance.

Pay

$128,000 — $200,000 USD (base salary)

Tools

NIST SP 800-53 Rev 5, AWS GovCloud, Azure Government, GCP, OSCAL, NIST AI RMF, LLMs, DISA STIGs

AI focus

Uses AI and automation to streamline evidence collection, reporting, documentation review, triage, and prioritization; assesses AI capabilities and their compliance impact within the authorized boundary.