Sr Manager, DoD Information System Security

You will lead and scale our Department of Defense (DoD) IL5 SaaS and enclave security program. As the ISSM, you'll drive the Risk Management Framework (RMF) lifecycle from initial categorization through Authorization to Operate (ATO) and continuous monitoring. You'll partner with engineering to implement IL5-specific controls, enforce STIG/SRG compliance, and ensure our enclave is audit-ready. You will serve as the primary interface with Authorizing Officials (AOs), Security Control Assessors (SCAs), and government stakeholders, while coaching a small team to deliver sustained security excellence.

• RMF & ATO Leadership
• Own the RMF lifecycle: system categorization, control tailoring (NIST 800-53r5), evidence development, POA&M management, and AO briefings.
• Maintain eMASS records, packages, and artifacts; drive continuous monitoring cadence.
• Lead meeting DoD and organizational compliance obligations.

• IL5 Enclave Security Operations
• Design, implement, and mature SP and enclave security controls (boundary protections, identity/access, logging, incident response, vulnerability & patch management).
• Ensure STIG/SRG compliance (DISA guidance) and maintain situational awareness using ACAS, Nessus, and other compliance scanning tools.
• Map and validate inherited controls from AWS Gov Cloud, ensuring IL5 isolation is properly documented.

• Governance & Policy Compliance
• Ensure IS security measures align with applicable DoD and federal cybersecurity policies.
• Draft, review, and maintain cybersecurity policies, SOPs, and technical documentation.
• Oversee audit log monitoring, analysis, and reporting to meet DoD and organizational requirements.

• Stakeholder Engagement
• Act as primary interface with AOs, SCAs, auditors, partners, and mission owners.
• Translate risk posture, timelines, and remediation progress into executive-ready briefings.
• Support Configuration/Change Assurance Board (CAB) activities and provide risk-based recommendations.

• Team Coaching & Mentorship
• Supervise and mentor ISSO staff; establish operating cadence, SLAs, and dashboards.
• Prepare for SCA-V assessments and drive remediation through closure.

• Experience
• 8-12+ years in cybersecurity, including 4+ years leading DoD RMF/ATO efforts.
• Prior experience supporting IL4/IL5 ATOs as an ISSO/ISSM.
• Hands-on eMASS and POA&M management expertise.
• Deep familiarity with NIST 800-53r5, DISA CC SRG, STIGs/SRGs, and continuous monitoring practices.
• Cloud security experience with AWS Gov Cloud
  , including IL5 isolation patterns.

• Certifications
• DoD 8570/8140 IAM III baseline certification (e.g.,
  CISSP, CISM
  ).
• CAP, PMP, or similar certifications preferred.

• Other Requirements
• Strong communication and executive briefing skills.
• U.S. citizenship and eligibility for DoD Secret clearance (preferred/required by most IL5 programs).

The reasonably estimated salary for this role at Everbridge ranges from $130,000 - $175,000 and may also include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Everbridge offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, disability income benefits, life and AD&D insurance, a 401(k) plan and match, paid time off, and fitness reimbursements.

We are committed to providing equal employment opportunities in compliance with all applicable Federal, Provincial/State and Local laws, including the California Fair Chance Act and any local County Fair Chance Ordinance (or local equivalent). Pursuant to these and other relevant regulations, we consider qualified applicants with criminal histories in a manner consistent with the law. For roles subject to background checks, the following material job duties may be affected by an applicant's criminal history:
Access to sensitive or confidential information, such as financial records, proprietary data, or client information;
Management of cash, company funds, or other valuable assets;
Work in environments requiring heightened security measures;
Compliance…