Senior Information Systems Security Manager (ISSM)

📋 Description

• Own IL5 and IL6 authorization packages end to end as Virtualitics' named ISSM — SSPs, control
• Build the reciprocity playbook, artifacts, and evidence pipeline to cut time-to-ATO for new
• Own the CUI boundary for CMMC from scoping and control implementation through deficiency tracking
• Run FedRAMP alignment, SOC 2, and the customer security questionnaire and due diligence pipeline
• Replace manual evidence collection with automation, writing Python, Bash, SQL, and API glue to keep
• Partner with engineers to turn controls into acceptance criteria and design requirements into the

🎯 Requirements

• Personal ownership of a DoD IL4/IL5/IL6, FedRAMP Moderate/High, or agency ATO package taken end to
• Deep working knowledge of NIST 800-53, NIST 800-37 (RMF), and the DoD Cloud Computing SRG
• Ability to evaluate cloud technical architectures: read Terraform, follow CI/CD pipeline
• Proficiency with AI-native workflows and agentic tools (e.g., Claude Code) with grounded views on
• Assessor-grade writing for control narratives and security documentation
• Experience facing AOs, 3PAOs, or external assessors directly

🎁 Benefits

• Meaningful ownership from day one
• Highly competitive compensation and meaningful equity participation
• Fully paid medical, dental, and vision coverage for you and your dependents
• Unlimited PTO and flexible work arrangements
• Remote flexibility and hybrid options for team members in Los Angeles or Washington, DC areas