Remote Federal ISSO & Compliance Lead

Commence; Virginia; Remote; USD 120,000 - 160,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security across federal systems supporting CMS, VA, DoD/DHA, IRS, and DHS/TSA. You will own assessment, authorization, and continuous monitoring, reporting to the ISSM and CIO.

Strong RMF experience and multi-agency familiarity are essential. You will collaborate with CIO, Cybersecurity Engineers, Compliance Analysts, and Project Managers to integrate security into project plans, manage risk, and ensure compliance with

Qualifications

• 5+ years of information assurance or cybersecurity experience.
• 3+ years as an ISSO or A&A lead for federal information systems; bachelor’s degree in a related field or equivalent experience.
• Experience with two or more of CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A.
• Familiarity with AWS and Microsoft 365/Azure.
• Clear, precise writer capable of managing multiple deadlines.
• CompTIA Security+ (or higher DoD 8140-qualifying) required; CISSP, CGRC, CISA, CCSP preferred.
• U.S. citizenship and ability to obtain and maintain federal Public Trust suitability.

Responsibilities

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs and Prime contractor security teams.
• Lead Security Assessment and Authorization lifecycle under RMF (SP 800-37) through ATO and reauthorization.
• Maintain System Security and Privacy Plan, risk assessment, PIA, contingency plan, and incident response plan.
• Perform continuous monitoring, vulnerability scans, and remediation tracking with Cybersecurity Engineers and IT Operations.
• Prepare for CMS VA/DoD/IRS assessments and respond to findings with Compliance Analysts.
• Ensure compliance with CMS ARS/IS2P2, VA 6500, DFARS, NIST SP 800-171/CMMC, IRS 1075/4812, DHS 4300A, HIPAA, and Privacy Act.
• Assist in internal audits and control assessments against SOC 2, NIST CSF/SP 800-53, SP 800-171, and HIPAA.

Skills

ISSO designation

NIST RMF

FedRAMP knowledge

Vulnerability assessment

AWS & Azure

Security+

CISSP/CISA/CCSP

US citizenship

Education

Bachelor's degree or equivalent

Tools

Tenable Nessus

SCAP/STIG Viewer

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security across federal systems supporting CMS, VA, DoD/DHA, IRS, and DHS/TSA. You will own assessment, authorization, and continuous monitoring, reporting to the ISSM and CIO.

Strong RMF experience and multi-agency familiarity are essential. You will collaborate with CIO, Cybersecurity Engineers, Compliance Analysts, and Project Managers to integrate security into project plans, manage risk, and ensure compliance with