Lead ISSE: Gov't ATO & FedRAMP Programs

UNAVAILABLE; Seattle (WA); Hybrid; USD 165,000 - 233,000; Full time

Benefits offered by this job

Health benefits

RSUs

Paid time off

Job summary

DocuSign seeks a senior Information Security professional to lead the ATO program for Federal and DoD systems. You will own the ATO/SSP lifecycle, coordinate across GovRAMP, FedRAMP High, and IL environments, and drive secure cloud implementations.

You will partner with product, engineering, and security teams to embed compliant practices, produce artifacts, and maintain audit readiness for government customers.

Qualifications

• BA/BS degree or equivalent work experience in a security field.
• 12+ years of experience with security controls and compliance related to NIST and FedRAMP.
• Experience with risk management frameworks, including risk ratings and the ability to contextualize data based on risk.
• Experience automating audit evidence collection across security and compliance frameworks.

Responsibilities

• Own and drive the full lifecycle from system categorization to receiving formal ATO for Federal and DoD information systems.
• Oversee and provide guidance on the maintenance of Assessment and Authorization artifacts, including the SSP, SAP, and all Appendix Plans.
• Ensure all ATO package deliverables are audit-ready and align with NIST FedRAMP SPs and DoD SRG.
• Lead mature security reviews across core products and cloud environments with high‑fidelity artifacts.
• Maintain and mature risk management processes using NIST 800-30/37 for compliance and risk reduction.
• Develop playbooks to support technical teams in compliance initiatives.
• Present risk in regulatory and business contexts to guide Executive Leadership.
• Maintain timely ConMon and remediation strategies across environments.
• Collaborate with security teams to operationalize new risk-reduction capabilities.
• Partner with Prod/Dev, Sec Architecture, and Infra teams to mitigate vulnerabilities.
• Drive remediation of vulnerabilities via POA&M tracking.
• Ensure timely internal security reviews before deployment of new products.
• Lead complex customer security questionnaires for FedRAMP, StateRAMP, DoD SRG milestones.

Skills

Security controls

NIST FedRAMP

Risk management

Audit evidence collection

Cloud security

Public Trust/clearance readiness

Assessment & Authorization

Education

BA/BS degree

DoD 8140 baseline cert

Public Trust / Tier 3 background check

CISSP/CISM/CASP+

Tools

Tenable

Sysdig

Splunk

Windows Defender

Log Analytics

Job description

DocuSign seeks a senior Information Security professional to lead the ATO program for Federal and DoD systems. You will own the ATO/SSP lifecycle, coordinate across GovRAMP, FedRAMP High, and IL environments, and drive secure cloud implementations.

You will partner with product, engineering, and security teams to embed compliant practices, produce artifacts, and maintain audit readiness for government customers.