Information System Security Officer (ISSO) – FedRAMP Lead

About the role

We are looking for an experienced Information System Security Officer (ISSO) to lead the security and compliance posture of our FedRAMP‑authorized cloud environment. You will work closely with engineering, cloud operations, DevOps, product, and compliance teams to ensure continuous adherence to federal security standards.

Key responsibilities

• Serve as the designated ISSO for FedRAMP‑authorized systems and maintain the Authority to Operate (ATO).
• Lead continuous monitoring activities, including monthly, quarterly, and annual reporting.
• Coordinate annual assessments, independent audits, penetration testing, and security reviews with Third‑Party Assessment Organizations (3PAOs).
• Manage security‑related communications with federal agencies and sponsoring organizations.
• Conduct security risk assessments, vulnerability analyses, and review Plan of Action & Milestones (POA&M) items.
• Evaluate security impacts of system changes and support Significant Change Request (SCR) submissions.

Required profile

• Proven experience as an ISSO or similar role in a FedRAMP‑authorized cloud environment.
• Strong knowledge of federal security frameworks such as NIST 800‑53 and FISMA.
• Hands‑on experience with major cloud platforms (Azure, AWS, or GCP).
• Ability to collaborate across engineering, operations, and compliance teams.

Required skills

• FedRAMP
• NIST 800‑53
• FISMA
• Microsoft Azure
• Amazon Web Services (AWS)
• Google Cloud Platform (GCP)

What we offer

• Opportunity to work on high‑impact security initiatives in a regulated environment.
• Collaborative, engineering‑focused culture.
• Access to advanced analytics and risk‑management tools.