🕒 yesterday
Own the strategy and delivery of core banking products, improving payment and account experiences while partnering across engineering, design, risk, compliance, and banking partners.
Senior Information Systems Security Manager (ISSM)
📅 Sep 14
IL5 ATOIL6 ATONIST 800-53NIST 800-37
📜 Description
- Own IL5 and IL6 authorization packages end to end as the named ISSM.
- Build playbooks and evidence pipelines to streamline time-to-ATO for new customers.
- Manage CUI boundaries and oversee compliance with CMMC and FedRAMP.
- Automate evidence collection using Python, Bash, SQL, and APIs.
- Collaborate with engineers to integrate security controls into system requirements.
🛠️ Requirements
- Personal ownership of a DoD IL4/IL5/IL6 or FedRAMP ATO package.
- Deep knowledge of NIST 800-53, NIST 800-37, and DoD Cloud Computing SRG.
- Ability to evaluate cloud architectures and assess regulatory compliance.
- Proficiency with AI-native workflows and assurance tools.
- Strong writing skills for control narratives and security documentation.
- Experience interacting with AOs and external assessors.
- U.S. citizenship required; active Secret clearance preferred.
- IAM Level II or III certification (CISSP, CISM, or CASP+) required within six months.
✨ Benefits
- Highly competitive compensation.
- Meaningful equity participation.
- Fully paid medical
- Dental
- Vision coverage for you and your dependents
- Unlimited PTO.
- Flexible work arrangements, including remote options.
Full job description
About Virtualitics
Virtualitics is the category leader in AI-native readiness applications for defense, government, and critical infrastructure. Founded on a decade of Caltech research in partnership with NASA/JPL, we are led by scientists, strategists, and servicemembers united by a single mission: to solve the world’s most complex, mission-critical challenges with AI.
Our Readiness AI solutions deliver operational certainty — giving leaders and operators a clear picture of what’s ready, what’s at risk, and what to do next. By identifying risks early, diagnosing root causes, and recommending prioritized actions with transparent, explainable AI, we help organizations move from data complexity to decision advantage.
Behind that impact is relentless innovation. Inventors at heart, we hold 15+ U.S. patents and are leading the shift toward agent-driven readiness. But what truly sets us apart is our culture — relentless about results, grounded in transparency, and driven by compassion for the mission and the people it serves.
If you’re motivated by impact, inspired by technical depth, and ready to build AI that performs where it matters most — you’ll find your mission here.
Role: Senior Information Systems Security Manager (ISSM)
We just earned our IL6 ATO and our IL5 authorization is close behind. Every new customer we win needs their own Authorizing Official to issue an ATO, and that reciprocity work has become the constraint on how fast we can grow. Our team is looking for a Senior ISSM to own it — running federal authorizations end to end as our named ISSM of record, so that each new customer ATO becomes a package we pull and tailor rather than a project we rebuild from scratch. This is a cloud and product authorization role rather than a closed-area or SCIF ISSM position; our El Segundo SIPR space is provided and accredited by Nooks. Ability to work quickly, automate relentlessly, and translate between compliance language and engineering reality will be key.
This position is remote with ability to travel to a SCIF when requested by the company.
About Virtualitics
Virtualitics is the category leader in AI-native readiness applications for defense, government, and critical infrastructure. Founded on a decade of Caltech research in partnership with NASA/JPL, we are led by scientists, strategists, and servicemembers united by a single mission: to solve the world’s most complex, mission-critical challenges with AI.
Our Readiness AI solutions deliver operational certainty — giving leaders and operators a clear picture of what’s ready, what’s at risk, and what to do next. By identifying risks early, diagnosing root causes, and recommending prioritized actions with transparent, explainable AI, we help organizations move from data complexity to decision advantage.
Behind that impact is relentless innovation. Inventors at heart, we hold 15+ U.S. patents and are leading the shift toward agent-driven readiness. But what truly sets us apart is our culture — relentless about results, grounded in transparency, and driven by compassion for the mission and the people it serves.
If you’re motivated by impact, inspired by technical depth, and ready to build AI that performs where it matters most — you’ll find your mission here.
What we offer you
At Virtualitics, you’ll join a high-performance team of scientists, strategists, and servicemembers building AI that operates in the world’s most demanding environments. The problems we solve matter — and so does the opportunity to grow while solving them.
You’ll have meaningful ownership from day one, with the ability to accelerate your career alongside a company scaling rapidly in national security and critical infrastructure.
We offer highly competitive compensation, meaningful equity participation, and fully paid medical, dental, and vision coverage for you and your dependents. Our benefits also include unlimited PTO and flexible work arrangements, with remote flexibility and hybrid options for team members based in the Los Angeles or Washington, DC areas.
What you will be doing:
● Authorization Ownership: Own our IL5 and IL6 packages end to end as Virtualitics' named ISSM — SSPs, control narratives, POA&Ms, significant change reviews, continuous monitoring, and annual assessments.
● Reciprocity at Scale: Build the playbook, artifacts, and evidence pipeline that cut time-to-ATO for every new customer, and act as the front-line technical contact for sponsor AOs, 3PAOs, and customer security reviewers.
● CMMC and CUI: Own our CUI boundary from scoping and control implementation through deficiency tracking and assessment readiness.
● Commercial Assurance: Run FedRAMP alignment, SOC 2, and the customer security questionnaire and due diligence pipeline that shows up in every enterprise and federal deal.
● Evidence Automation: Replace manual evidence collection with automation, writing the Python, Bash, SQL, and API glue that keeps control evidence continuous rather than assembled the week before an assessment.
● Engineering Interface: Partner with engineers to turn controls into acceptance criteria they can build against, designing requirements into the system rather than papering over gaps with procedure.
What we are Looking for:
● Personal ownership of a DoD IL4/IL5/IL6, FedRAMP Moderate/High, or agency ATO package taken end to end — not supported from the side.
● Deep working knowledge of NIST 800-53, NIST 800-37 (RMF), and the DoD Cloud Computing SRG, with the judgment to tailor controls rather than apply them literally. ● Proven ability to evaluate cloud technical architectures and determine whether they
satisfy regulatory objectives: you can read Terraform, follow a CI/CD pipeline end to end, understand a Kubernetes deployment, and challenge an engineer's design on its technical merits.
● Proficiency with AI-native workflows and agentic tools (e.g., Claude Code), with grounded views on which assurance workflows AI can run reliably today and which still need a human in the loop.
● Assessor-grade writing — control narratives and security documentation a reviewer can act on without a follow-up call.
● Experience facing AOs, 3PAOs, or external assessors directly, with the credibility to hold the room.
● U.S. citizenship required. Active Secret clearance preferred; we will sponsor the right candidate.
● IAM Level II or III certification (CISSP, CISM, or CASP+) per DoD 8140, held or obtainable within six months of hire.
What are our Preferred requirements:
● Experience with a government hosting or authorization partner (Palantir FedStart, Second Front Game Warden, or similar) and how inherited controls change your package. ● OSCAL or other machine-readable control documentation, and GRC / evidence automation platforms such as RegScale, Xacta, Drata, or eMASS.
● CMMC scoping or assessment experience on a CUI boundary; CCP or CCA designation is a great addition.
● CNAPP and container scanning in a compliance context (Wiz, Trivy, Anchore, Tenable), including triaging findings and defending risk acceptances.
● Familiarity with the cloud native technologies common in software startups: Okta, Zscaler, GitHub, JIRA, Slack.
● Experience scaling Series C / Series D startups.
What are some Valued skills:
● High-agency
● AI fluent
● Diplomatic
Similar jobs
Search more Manager jobs
Senior Product Lifecycle Manager
🕒 yesterday
Wayve👥 501 - 1000 employees🏢 Computer Software🧠 AI-native
🕒 yesterday
Leads complex, cross-functional product lifecycle programmes for Level 2 and Level 4 vehicle products, connecting milestones to technical plans, dependencies and readiness evidence to support predictable delivery.
🕒 yesterday
Oversee fund accounting, investment valuations, and financial reporting for funds on the AngelList platform, while managing audit delivery, improving controls and automation, and coaching accounting team members.
Lifecycle Marketing Manager (Email & Engagement)
🕒 yesterday
Tenable👥 1001 - 5000 employees🏢 Cybersecurity
🕒 yesterday
Own global lifecycle communications across email, in-product, and other channels, creating persona-based programs and messaging that support pipeline growth, product adoption, and customer retention.
🕒 yesterday
Leads client education strategy and content development, creating personalized learning experiences that improve product adoption, client utilization, and retention across the client journey.
📍 🇨🇦 Toronto - Hybrid💰 C$98.6k - C$126.6k / year💼 Full-Time🎸 Senior🧑🚀 Learning and Development Specialist