Public Sector ISSO Lead: FedRAMP/DoD ATO Expert

Docusign; Seattle (WA); Hybrid; USD 165,000 - 233,000; Full time

Benefits offered by this job

Paid Time Off

Full Health Benefits Plans

Retirement Plans

RSUs

Learning and Development

Job summary

DocuSign is seeking an experienced Information System Security Manager to lead the Federal and DoD ATO program within its Public Sector. You will own Authority to Operate packages, develop System Security Plans, and ensure audit readiness across GovRAMP, FedRAMP High, and DoD IL environments. This is an individual contributor role reporting to the Sr.

Director of Public Sector and Insider Risk. In this capacity you will translate complex compliance requirements into actionable technical specs

Qualifications

• BA/BS degree or equivalent work experience.
• 12+ years of experience with security controls and compliance related to NIST and FedRAMP.
• Experience with risk management frameworks and contextualizing data by risk.
• Experience automating audit evidence collection across security and compliance frameworks.
• Experience with cloud native platforms and services.
• DoD 8140/8570 baseline certification (e.g., Sec+, CISSP, CISM, CASP+).
• Ability to pass a Public Trust/Tier 3 Background Investigation.
• Experience with NIST SP 800-53, CNSSI 1253, and the DoD Cloud SRG.
• Experience leading through influence in a remote, global organization.

Responsibilities

• Own and drive the full lifecycle from system categorization to ATO for Federal/DoD info systems.
• Maintain ATO artifacts including SSP, SAP, and appendix plans.
• Ensure deliverables are audit-ready and align with FedRAMP/NIST/DoD requirements.
• Lead security reviews across core products and cloud environments with evidence.
• Maintain risk management using NIST 800-30/37 to ensure compliance.
• Improve risk visibility by consolidating assessments and audits.
• Develop playbooks to support technical teams in compliance initiatives.
• Present risk in regulatory and business contexts to executives.
• Deliver Continuous Monitoring and remediation strategies.
• Collaborate to operationalize capabilities that reduce risk.
• Work with product/infrastructure to mitigate vulnerabilities and gaps.
• Drive remediation of vulnerabilities with POA&M tracking.
• Implement actions from CISA directives and DoD alerts.
• Ensure timely internal security reviews before deployment.
• Partner with product/infrastructure for FedRAMP/StateRAMP/DOD milestones.
• Lead responses to security questionnaires for government customers.
• Join briefings to explain security posture to government clients.

Skills

Security controls

NIST FedRAMP

Risk management

Audit evidence automation

Cloud native platforms

DoD 8140/8570 certs

Public Trust background

NIST 800-53 / CNSSI 1253

Leading through influence

Security monitoring tools

Education

BA/BS degree or equivalent

Tools

Xacta / eMASS

ITAR / TexRAMP familiarity

OSCAl FedRAMP modernization

AI Guardrails awareness

Job description

DocuSign is seeking an experienced Information System Security Manager to lead the Federal and DoD ATO program within its Public Sector. You will own Authority to Operate packages, develop System Security Plans, and ensure audit readiness across GovRAMP, FedRAMP High, and DoD IL environments. This is an individual contributor role reporting to the Sr.

Director of Public Sector and Insider Risk. In this capacity you will translate complex compliance requirements into actionable technical specs