Responsibilities

We're hiring a Security Authorization Lead to get GovSignals deployments through government security approval and keep them approved. You'll work under the CISO with support from the CTO, and you'll be the first person here dedicated to this work full time.
Our customers cannot use GovSignals until their own security office says yes. Every deployment brings a different boundary, a different set of reviewers, and a different list of questions about how their data is handled. You'll plan that path with the customer before work starts, write documentation that survives a line-by-line read, answer reviewers directly, carry findings to closure, and keep the evidence current afterward so the next deployment starts ahead of where the last one did.
GovSignals operates at FedRAMP High and DoW IL5 today. Some deployments will require IL6. The work also covers CMMC Level 2, SOC 2, and whatever a specific customer asks for.
Plan the authorization path for each customer deployment: scope the boundary, work out which controls we inherit and which we answer for, and agree the steps with the customer's security office before work starts.
Write and maintain what approval depends on: system security plans, control narratives, architecture diagrams, and the supporting artifacts reviewers ask for.
Prepare for assessments and reviews, answer reviewer questions directly, and track findings and POA&M items until they close.
Keep approvals in force once granted: continuous monitoring reporting, significant change requests, annual assessments, and the vulnerability and patch evidence behind them.
Own customer security questionnaires and security reviews, and keep a response library so each one starts from the last.
Work with engineering when a requirement has a technical consequence: say what the control means in the product, then follow it to done.
We deploy through Defense Unicorns, SecondFront GameWarden, and Palantir FedStart.
You've personally taken a system through a DoW authorization and stayed with it through its ongoing obligations. What you did matters more than what your title was.
Direct experience with government security reviewers, assessors, or an authorizing official's staff. You've been the one answering the questions.

Security Authorization Lead at Govsignals · LumiJobs

Security Authorization Lead

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Govsignals

More roles at Govsignals