The posting
ONWARDS TOGETHER!
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by the Illumio AI Security Graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments – stopping the spread of attacks before they become disasters.
Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
OUR TEAM'S VISION:
At Illumio, our product management team thrives on visionary leadership, customer-centric innovation, and relentless execution. We tackle the most critical and complex challenge in modern cybersecurity: stopping malicious actors and containing cyber threats before lateral movement turns an attack into a widespread business catastrophe.
As a product manager here, you will directly define, design, and drive the future of Zero Trust, micro-segmentation, and automated breach containment. You will work side-by-side with world-class engineers, strategic partners, and global enterprise customers to defend highly complex hybrid data centers and multi-cloud architectures.
If you are eager to solve massive, distributed security problems and build resilient software that the world’s largest organizations rely on daily to safeguard their critical infrastructure, join our mission and shape a safer digital future.
YOUR IMPACT:
We are looking for a Director of Global Public Sector Product Management to own the strategy, portfolio, and execution of products that meet the security and compliance requirements of government customers worldwide. You will build and lead a team of product managers, set the company's public sector product vision, and serve as the senior product voice with executives, government customers, partners, and assessors.
This is a hands-on leadership role for someone who has taken products through authorization and certification at scale, not just overseen the effort. You will be accountable for the path to compliance across U.S. federal, state, and local markets and across international government markets, and for turning that compliance footprint into durable revenue and competitive advantage.
Strategy and Portfolio
- Define and own the global public sector product strategy, multi-year roadmap, and compliance investment thesis, balancing customer demand, market opportunity, cost, and risk.
- Make portfolio-level tradeoffs on which authorizations, certifications, and regions to pursue and in what order, building business cases for executive and board-level review.
- Partner with Sales, Marketing, and Finance on go-to-market, pricing, packaging, and contract vehicles for government segments, and share accountability for public sector revenue goals.
Compliance Delivery
- Own delivery against U.S. regimes including FedRAMP, CJIS, FIPS 140-2/140-3, and Common Criteria, partnering with Engineering, Security, Legal, and third-party assessors (3PAOs, accredited labs)
- Ensure control requirements (NIST SP 800-53, 800-171, CJIS Security Policy, FIPS validation requirements, Protection Profiles) are translated into prioritized product requirements and engineering commitments across teams
- Drive architecture and deployment decisions that affect compliance, such as dedicated or sovereign environments, data residency, cryptographic module use, personnel and access restrictions, and supply chain requirements
- Lead the expansion of the compliance footprint internationally, sequencing regional frameworks and working with regional leaders and partners to meet them
- Anticipate regulatory change (for example, FedRAMP 20x and evolving cryptographic standards) and adjust strategy ahead of it
Leadership and Influence
- Hire, develop, and lead a team of product managers and program leads, setting a high bar for craft, accountability, and customer focus
- Build repeatable processes that make compliance part of the product development lifecycle rather than a late-stage gate, and establish governance and metrics for the compliance program
- Represent the company with government authorizing officials, agency customers, industry groups, and key partners, and act as an executive sponsor on strategic accounts
- Influence engineering and company-wide priorities through clear communication with senior executives, and report on progress, risk, and investment return
YOUR TOOLKIT:
Required Qualifications
- Must be a US citizen; ability to obtain a U.S. government background check, CJIS fingerprint-based screening, or other clearance strongly preferred
- 12+ years of product management experience, including 6+ years working on products sold to government or other highly regulated customers
- Hands-on experience delivering products through FedRAMP authorization (agency or JAB/Program Authorization), ideally across multiple products or environments
- Working knowledge of CJIS Security Policy requirements and how they apply to cloud and software products serving law enforcement and criminal justice agencies
- Experience with FIPS 140-2/140-3 cryptographic validation and the product implications of using validated modules
- Experience with Common Criteria evaluations (NIAP Protection Profiles, CCEVS, or equivalent schemes)
- Familiarity with other applicable U.S. regimes such as NIST 800-53/800-171, StateRAMP/GovRAMP, DoD Impact Levels (SRG), CMMC, and Section 508 accessibility
- Demonstrated ability to translate dense regulatory and technical requirements into actionable product plans and to drive cross-functional organizations to meet them
- Strong technical fluency: comfortable discussing cloud architecture, encryption, identity and access management, logging, and vulnerability management with engineers and customer security teams
- Excellent written and verbal communication, including with government stakeholders, auditors, and C-level executives
Strongly Preferred
- A track record of successfully shipping products that achieved FedRAMP, CJIS, FIPS, and/or Common Criteria compliance, from initial scoping through certification or authorization
- Experience working directly with 3PAOs, accredited testing laboratories, and government authorizing officials
- Experience building or scaling a public sector product line or government cloud offering, including ownership of business outcomes
- Experience building and managing teams across multiple geographies
Additional Desired Qualifications (International)
Experience with compliance regimes and requirements outside the U.S., such as:
- IRAP (Australia)
- ISMAP (Japan)
- ISO/IEC 27001, 27017, 27018 and related standards
- UK Cyber Essentials / Cyber Essentials Plus and other UK government requirements
- ENISA guidance and the EUCS cloud certification scheme
- Other regional frameworks such as C5 (Germany), SecNumCloud (France), Canadian Protected B / CCCS, and data sovereignty or residency requirements
Additional nice-to-haves: relevant certifications (CISSP, CISM, CISA, CCSP, or equivalent), experience with government procurement vehicles (GSA Schedule, G-Cloud, etc.), and a background in security engineering or compliance.
This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.
#LI-KD1 #LI-REMOTE
Our Commitment
Illumio believes that an environment of unique backgrounds, experiences, viewpoints, and individual contributions creates a culture of belonging, drives our future, and makes us stronger together in support of our customers and their success.
All official job offers from our company are extended directly by our recruitment team and will be sent through an official E-Signature document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience.
For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Illumio will consider for employment qualified applicants with arrest and conviction records.
