Remote Federal ISSO & Information Assurance Lead

Commence; Athens (GA); Remote; USD 120,000 - 170,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead the security assessment, authorization, and continuous monitoring for federal systems. You will own the RMF/ATO lifecycle, author and maintain SSPs and risk assessments, and collaborate with CIO, engineers, and compliance teams to ensure agency requirements are met.

The position requires 5+ years in information assurance/cybersecurity, 3+ years as ISSO/A&A lead, and active ability to obtain a Public Trust.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• Experience leading federal RMF/ATO processes and creating SSP/POA&M.
• U.S. citizenship to obtain federal Public Trust.
• Proficiency with vulnerability scanning and remediation efforts.
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC.
• Experience with FedRAMP and HIPAA a plus.
• Strong written and verbal communication skills.

Responsibilities

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs.
• Coordinate security milestones into project plans and assess changes before shipment.
• Prepare and maintain ATO packages, SSPs, risk assessments, and incident response plans.
• Maintain POA&M and monitor vulnerability scans; drive remediation.
• Lead CMS/VA/DoD/IRS assessments and evidence collection.
• Ensure compliance with CMS ARS/IS2P2, NIST SP 800-171/CMMC, HIPAA.
• Act as first responder for security incidents and coordinate notifications.
• Manage personnel security tasks and training requirements.
• Support internal audits and control assessments.

Skills

Information security

ATO / RMF experience

RMF/NIST knowledge

Vulnerability analysis

Cloud/Azure

Documentation/written communication

Certifications

U.S. citizenship

Education

Bachelor's degree in a related field

Tools

Tenable/Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead the security assessment, authorization, and continuous monitoring for federal systems. You will own the RMF/ATO lifecycle, author and maintain SSPs and risk assessments, and collaborate with CIO, engineers, and compliance teams to ensure agency requirements are met.

The position requires 5+ years in information assurance/cybersecurity, 3+ years as ISSO/A&A lead, and active ability to obtain a Public Trust.