FedRAMP Information System Security Officer (ISSO)

Semperis is hiring its FedRAMP ISSO for the Addison, Texas office on a hybrid basis, to lead the company's move to FedRAMP 20x certification for its cloud identity security products. Working for the Head of Risk and Compliance, the ISSO defines the authorisation boundary and reconciles it with SOC 2 scope, turns each mandatory Key Security Indicator into a measured, evidenced control, builds machine-readable evidence from live security tooling, embeds controls into engineering design, manages the assessor relationship, and runs post-certification monitoring and change reporting.

Candidates need six years in GRC, security compliance or IT audit, ISSO experience through at least one full Rev 5 authorisation at a SaaS company, cloud security fluency, and a CISSP, CISM, CISA or CRISC.