FedRAMP Information System Security Officer (ISSO)

Leads hands-on FedRAMP 20x work for Semperis as its information system security officer, based in the Hoboken office on a hybrid schedule. The ISSO interprets each FedRAMP requirement for leadership, assessors and reviewers, maps the certification boundary, builds compliance-as-code criteria with security engineering, generates certification data automatically from cloud and security tools rather than spreadsheets, delivers the Marketplace listing and certification package, and keeps the programme compliant afterwards through KSI reviews, POA&M tracking, training and incident reporting.

It requires six years in GRC, security compliance or IT audit with ISSO experience through a full Rev 5 authorisation, strong cloud security knowledge across Azure and AWS, assessor management, and CISSP, CISM, CISA or CRISC.