Information System Security Officer (ISSO) – FedRAMP Focus

About the role

We are looking for an experienced Information System Security Officer (ISSO) to lead security and compliance for our FedRAMP‑authorized cloud environment. The role partners with engineering, cloud operations, DevOps, product and compliance teams to maintain authorization, drive continuous monitoring and support audits.

Key responsibilities

• Serve as the designated ISSO for FedRAMP‑authorized systems and maintain the Authority to Operate.
• Lead continuous monitoring activities, including monthly, quarterly and annual reporting.
• Coordinate annual assessments, independent audits, penetration testing and security reviews with third‑party assessors.
• Conduct security risk assessments, manage Plan of Action & Milestones (POA&M) and evaluate security impacts of system changes.
• Ensure proper implementation and effectiveness of NIST 800‑53 security controls.
• Participate in security incident investigations and coordinate response efforts.
• Collaborate with engineering and DevOps to embed compliance into the software development lifecycle.

Required profile

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering or related field (or equivalent experience).
• 5+ years of information security, cybersecurity or compliance experience.
• 3+ years supporting FedRAMP, FISMA or other federal compliance programs.
• Experience maintaining FedRAMP Moderate or High authorized environments.
• Hands‑on experience with cloud platforms such as AWS, Azure or Google Cloud.

Required skills

• FedRAMP requirements and NIST SP 800‑53.
• NIST 800‑37 Risk Management Framework, FISMA and NIST 800‑171.
• Zero Trust Architecture principles.
• Vulnerability management processes.
• Security operations and incident response.
• SIEM platforms, vulnerability scanners and endpoint detection and response (EDR).
• Identity and Access Management (IAM) and cloud‑native security services.

What we offer

• Annual incentive bonus.
• Country‑specific benefits package.