Responsibilities

Own the FedRAMP program end-to-end: serve as the single accountable leader for our FedRAMP Moderate authorization, including the System Security Plan (SSP), continuous monitoring program, POA&M lifecycle, and agency relationships. You set the compliance strategy and drive execution.
Maintain and defend the System Security Plan: ensure the SSP accurately reflects system architecture, control implementations, operational changes, and any approved uses of automation or AI within the authorized boundary. When an auditor asks “why,” you have the answer.
Drive POA&M management from finding to closure: track open findings from 3PAO assessments, vulnerability scans, and internal reviews; coordinate remediation timelines with engineering; and build scalable tracking, trend analysis, and reporting workflows — including AI-assisted triage and prioritization where it accelerates outcomes.
Lead continuous monitoring: monthly and annual ConMon reporting, vulnerability scan review and triage, configuration management reviews, and incident reporting per FedRAMP requirements. Identify and implement opportunities to automate evidence collection and streamline reporting cycles.
Run annual 3PAO assessments from start to finish: prepare documentation packages, manage assessment logistics, facilitate evidence collection, and respond to auditor inquiries with clarity, confidence, and well-organized support materials.
Assess the security impact of system changes: evaluate new features, infrastructure updates, and emerging AI capabilities through the change management process — ensuring nothing ships that introduces unreviewed compliance, boundary, or control gaps.
Serve as the primary federal point of contact: build and maintain relationships with agency customers, Authorizing Officials (AOs), and the FedRAMP PMO, grounded in transparency, technical credibility, and clear communication on compliance posture and evolving technology use.
Collaborate with engineering and DevOps: partner on security control implementation, scan result review, and timely remediation. Identify opportunities to improve control validation and compliance operations through secure automation, infrastructure-as-code integration, and AI-assisted workflows.
Coordinate security incident response: work alongside the security operations team to ensure timely, accurate agency notification and defensible documentation per FedRAMP reporting requirements.
Monitor and translate evolving federal guidance: NIST publications, FedRAMP policy updates, OMB memos, CISA alerts, and emerging AI governance expectations (including NIST AI RMF) — into clear, actionable direction for the team.
We are a remote-first company and work happens across many time-zones – you may be required to occasionally perform duties outside your standard working hours
5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider — not just touching FedRAMP, but owning it.

Onboarding Program Owner, Revenue Enablement at Cribl · LumiJobs

Onboarding Program Owner, Revenue Enablement

Responsibilities

Qualification

Required

Benefits

Company

Cribl

More roles at Cribl