Remote Federal ISSO & Compliance Lead

Commence; Orangeburg (SC); Remote; USD 110,000 - 160,000; Full time

Job summary

Commence seeks an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will collaborate with the CIO, Compliance Analysts, and Project Managers to embed security milestones in project plans and ensure ongoing compliance across systems.

The role requires 5+ years in information assurance, DoD/NIST RMF experience, and strong writing skills. U.S.

Qualifications

• 5+ years information assurance or cybersecurity experience, incl. 3+ years as ISSO/A&A lead for federal systems.
• Experience taking a federal system through initial ATO or reauthorization under NIST RMF, including SSP authorship and POA&M management.
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC; IRS 1075/4812; DHS 4300A; HIPAA/CUI.
• Comfort reading vulnerability/configuration scans (Nessus, Defender, AWS Inspector, SCAP/STIG).
• Familiarity with AWS and Microsoft 365/Azure; excellent writing and deadline management.
• CompTIA Security+ (or higher DoD 8140 qualifying); CISSP/CGRC/CISA/CCSP preferred.
• U.S. citizenship and ability to obtain/maintain federal Public Trust.

Responsibilities

• Serve as the designated ISSO for assigned federal systems; liaison to agency ISSOs and Authorizing Officials.
• Coordinate security milestones with Project Managers and assess security impact of system changes.
• Develop and maintain ATO packages; create SSP, risk assessment, Privacy Impact Assessment, contingency and incident response plans.
• Maintain POA&M in agency GRC platforms; review vulnerability scans and track remediation with Cybersecurity Engineers.
• Lead CMS VA/DoD/IRS assessments; ensure evidence collection and findings response.
• Ensure compliance with CMS ARS/IS2P2, VA 6500, 6500.6; DFARS, NIST SP 800-171/CMMC 2.0; HIPAA and Privacy Act.
• Act as first responder for security/privacy incidents and coordinate with stakeholders.

Skills

Information security

NIST RMF

Vulnerability assessment

Incident response

Policy/compliance

Clear writing

Education

Bachelor's degree

Tools

Tenable Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence seeks an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will collaborate with the CIO, Compliance Analysts, and Project Managers to embed security milestones in project plans and ensure ongoing compliance across systems.

The role requires 5+ years in information assurance, DoD/NIST RMF experience, and strong writing skills. U.S.