Information Systems Security Officer (ISSO)

About LVIS

LVIS Corporation is a Silicon Valley digital healthcare startup headquartered in Palo Alto, developing NeuroMatch, an FDA 510(k)-cleared AI-powered EEG analysis platform designed to support the diagnosis of neurological disorders. Backed by Stanford StartX and NVIDIA Inception, LVIS is building the future of AI-driven neurodiagnostics with a global team of scientists, engineers, and clinicians.

As we expand our cloud-based healthcare platform and pursue FedRAMP authorization, we are seeking a motivated Information Systems Security Officer (ISSO) to help build and scale our security and compliance program.

This role offers a unique opportunity to take direct ownership of FedRAMP activities, work closely with executive leadership, and help establish the security foundation of a rapidly growing healthcare AI company.

Responsibilities

• Support FedRAMP authorization and continuous monitoring activities.
• Own the development, maintenance, and updating of the FedRamp system Security Plan (SSP) and associated security documentation.
• Coordinate vulnerability management, remediation tracking, and audit preparation.
• Partner with engineering and DevOps teams to implement and monitor security controls.
• Support incident response, risk assessments, and third-party security reviews.
• Collect and manage compliance evidence for audits, customer security reviews, and FedRAMP assessments.
• Track POA&M items and security program metrics.

Requirements

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.
• 3 to 5+ years of cybersecurity, cloud security, compliance, GRC, or IT security experience.
• CompTIA Security+ certification.
• Strong technical writing and documentation skills.
• Experience working directly with software engineering and cloud infrastructure teams.

Preferred Qualifications

• AWS Security Specialty or SSCP certification.
• Participation in at least one SOC 2, FedRAMP, GovRAMP, StateRAMP, or ISO 27001 audit or assessment.
• Experience with AWS cloud environments and modern SaaS architectures.
• Familiarity with NIST 800-53, FedRAMP, HIPAA, or healthcare technology environments.
• Experience supporting regulated cloud platforms.
• Why Join LVIS?
• Own meaningful portions of the company's FedRAMP authorization effort.
• Work directly with leadership, engineering, and product teams.
• Gain hands-on experience with healthcare AI, cloud security, and regulatory compliance.
• Opportunity to grow into future security leadership roles as the company scales.
• Contribute to technology that improves neurological diagnosis and patient outcomes.
• Other Information
• Job type: Full-time, On-Site
• Work Eligibility: US Citizen( Only)