Remote Federal Information Security Officer (ISSO)

Commence; Arizona; Remote; USD 120,000 - 180,000; Full time

Job summary

Commence seeks an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will own RMF activities, author key documents, manage vulnerabilities, and coordinate with multiple agencies to maintain approved operating status.

You will collaborate with CIO, Cybersecurity Engineers, and Compliance Analysts to ensure compliance with CMS ARS/IS2P2, VA 6500, DoD RMF, and related standards.

Qualifications

• 5+ years information assurance or cybersecurity experience, including 3+ years as an ISSO or A&A lead for federal information systems; bachelor’s degree in a related field or equivalent experience.
• Has personally taken at least one federal system through an initial ATO or reauthorization under NIST SP, including SSP authorship and POA&M management in various agency GRC platforms.
• Working knowledge of at least two of: CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A. Experience with FedRAMP and HIPAA is a plus.
• Comfortable reading vulnerability and configuration scan output and translating findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• A clear, precise writer who can run several systems and deadlines clocks at once.
• CompTIA Security+ (or higher DoD 8140-qualifying certification) required; CISSP, CGRC, CISA, or CCSP preferred.
• U.S. citizenship and ability to obtain and maintain federal Public Trust suitability required.

Responsibilities

• ISSO designation and liaison to agency ISSOs and security teams; escalate program-level issues and exceptions to the ISSM.
• Coordinate with Project Managers to embed security milestones in plans and track deliverables against deadlines.
• Develop and maintain ATO packages; author and maintain SSP, risk assessment, Privacy Impact Assessment and related plans.
• Maintain POA&M and monitor vulnerabilities against agency baselines; coordinate remediation with Cybersecurity Engineers and IT Operations.
• Prepare for CMS, VA, DoD assessments and IRS reviews; gather evidence and respond to findings.
• Ensure compliance with CMS ARS/IS2P2, VA Handbooks, DFARS/NIST SPs, IRS publications, DHS requirements, and related standards.
• Act as first responder for security incidents and coordinate notifications with Privacy Officer and prime contractors.
• Complete system security deliverables and manage personnel security tasks for federal staff.
• Support internal audits and control assessments against SOC 2, NIST CSF/SP 800-53/800-171, HIPAA, and other frameworks.

Skills

ISSO experience

Federal security liaison

Written communication

Project coordination

Risk management

Security policy

Education

Bachelor's degree in a related field

Tools

Tenable Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

AWS

Microsoft 365/Azure

Job description

Commence seeks an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will own RMF activities, author key documents, manage vulnerabilities, and coordinate with multiple agencies to maintain approved operating status.

You will collaborate with CIO, Cybersecurity Engineers, and Compliance Analysts to ensure compliance with CMS ARS/IS2P2, VA 6500, DoD RMF, and related standards.