The Cloud ISSO is responsible for overseeing the security posture of cloud-based systems and ensuring compliance with organizational policies, federal regulations (e.g., FedRAMP, NIST 800-53), and cloud security best practices. This role acts as the security authority for cloud platforms, collaborating with DevOps, cloud engineers, and governance teams to manage risk and implement security controls throughout the cloud system lifecycle.
Serve as the primary security officer for assigned cloud systems (AWS, Azure, GCP, etc.)
Develop, document, and maintain System Security Plans (SSPs), POA&Ms, and other compliance documentation.
Conduct risk assessments, security impact analyses, and vulnerability reviews.
Ensure alignment with NIST, FedRAMP, ISO 27001, and other applicable frameworks.
Support security control implementation, continuous monitoring, and incident response planning.
Collaborate with system owners, developers, and auditors to maintain authorization to operate (ATO).
Participate in security reviews of CI/CD pipelines, infrastructure as code (IaC), and containerized workloads.
Stay current with emerging threats, technologies, and cloud security trends.
Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field.
Certifications: CISSP, CCSP, CISM, or CAP strongly preferred.
Experience: 3–5+ years of experience in information security, with at least 2 years in cloud environments.
Strong knowledge of AWS, Azure, or GCP security tools and services.
Experience with compliance standards such as FedRAMP, NIST 800-53, RMF, and FISMA.
Excellent communication, documentation, and stakeholder management skills.
#CloudISSO #InformationSecurity #CybersecurityJobs #FedRAMP #NIST80053 #CloudSecurity #ISSOJobs #AWSISSO #AzureSecurity #RiskManagement #DevSecOps #GRCJobs #SecurityCompliance #CloudGovernance #CISSP #SecurityCareers #AuthorizationToOperate #ATO #SecurityClearance