Federal ISSO & RMF Lead — Remote

Commence; Annapolis (MD); Remote; USD 110,000 - 150,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments for federal programs. You will own the ATO/continuous monitoring lifecycle, coordinate with the CIO, ISSM, and engineers, and ensure compliance with NIST SPs, RMF, and agency requirements.

Remote work option with 15-25% travel; candidates located in MD or other remote states are welcome. U.S. citizenship required; Security+ or higher is required; CISSP/CISA/CCSP preferred.

Qualifications

• 5+ years of information assurance or cybersecurity experience, including 3+ years as an ISSO or A&A lead for federal information systems.
• Bachelor’s degree in a related field or equivalent experience.
• Familiarity with FedRAMP, HIPAA, NIST SP 800-171/CMMC and related standards.
• Experience reading vulnerability reports and translating findings into remediation tasks.

Responsibilities

• Own the day-to-day security assessment, authorization, and continuous-monitoring activities for federal systems.
• Coordinate with CIO, ISSM, Cybersecurity Engineers, and project teams to integrate security milestones into plans.
• Prepare and maintain SSP, risk assessments, and POA&M; support external audits and agency assessments.

Skills

Information assurance

Cybersecurity

Technical writing

Communication

Project coordination

Education

Bachelor's degree in a related field

Equivalent experience

Tools

Tenable Nessus

SCAP/STIG Viewer

AWS

Microsoft 365/Azure

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments for federal programs. You will own the ATO/continuous monitoring lifecycle, coordinate with the CIO, ISSM, and engineers, and ensure compliance with NIST SPs, RMF, and agency requirements.

Remote work option with 15-25% travel; candidates located in MD or other remote states are welcome. U.S. citizenship required; Security+ or higher is required; CISSP/CISA/CCSP preferred.