FedRAMP Information System Security Officer (ISSO)

A FedRAMP information system security officer for Semperis, working hybrid from Phoenix and serving as the company's everyday expert on FedRAMP 20x. Reporting to the Head of Risk and Compliance, the ISSO sets up programme governance and the work plan, documents the in-scope environment and data flows, makes sure every Key Security Indicator has an owner, measure and evidence source, builds the Trust Center and security inbox, drives remediation of audit and pentest findings, supports GovRAMP, HIPAA and CJIS work, and advises leadership on pursuing higher certification levels.

The posting asks for six years of GRC or audit experience including a full FedRAMP Rev 5 authorisation as ISSO, NIST 800-53 control work, and a recognised security or audit certification.