Lead Information Security Officer - Public Sector ATO Expert

DocuSign, Inc.; Seattle (WA); Hybrid; USD 165,000 - 233,000; Full time

Benefits offered by this job

RSUs

Company bonus

Health benefits

Paid time off

Parental leave

Retirement plan

Job summary

DocuSign, Inc. is seeking an experienced Information System Security Manager to lead the Public Sector’s Assessment and Authorization program. You will own ATO packages and SSPs, coordinate with cross-functional teams, and drive compliance for GovRAMP, FedRAMP High, and DoD IL environments.

The role is an individual contributor reporting to the Sr. Director of Public Sector and Insider Risk, with hybrid in-office and remote work expectations.

Qualifications

• BA/BS degree or equivalent work experience.
• 12+ years of experience with security controls and compliance related to NIST and FedRAMP.
• Experience automating audit evidence collection across security and compliance frameworks (e.g., FedRAMP, NIST 800-53).
• Experience with compliance and assessment of cloud native platforms and services (Data warehouse, Service Mesh, Container Images and Microservices Orchestration).
• DoD 8140/8570 baseline certification (e.g., Sec +, CISSP, CISM, or CASP+).
• Ability to pass a Public Trust/Tier 3 Background Investigation.
• Experience with NIST SP 800-53, CNSSI 1253, and the DoD Cloud Computing SRG.
• Experience leading through influence, building trust with stakeholders across a remote, global organization.

Responsibilities

• Own and drive the full lifecycle from system categorization to receiving formal ATO for Federal and DoD information systems.
• Oversee and provide guidance on the maintenance of Assessment and Authorization artifacts, including SSP, SAP, and Appendix Plans.
• Ensure all ATO package deliverables are audit-ready and align with FedRAMP/NIST/DoD guidelines.
• Lead security reviews across core products and cloud environments with high-quality artifacts.
• Maintain and mature risk management processes using NIST 800-30/37.
• Develop playbooks to support technical teams in compliance initiatives.
• Present risk in regulatory and business contexts to executives.
• Collaborate with Prod/Dev, Sec Architecture, and Infra to mitigate vulnerabilities and align with policies.

Skills

Security controls

FedRAMP/NIST

Risk management

Cloud security

Public sector

Education

BA/BS degree

Tools

Tenable

Sysdig

Splunk

Windows Defender

Log Analytics

Job description

DocuSign, Inc. is seeking an experienced Information System Security Manager to lead the Public Sector’s Assessment and Authorization program. You will own ATO packages and SSPs, coordinate with cross-functional teams, and drive compliance for GovRAMP, FedRAMP High, and DoD IL environments.

The role is an individual contributor reporting to the Sr. Director of Public Sector and Insider Risk, with hybrid in-office and remote work expectations.