Remote Federal ISSO & RMF Compliance Lead

Commence; Crystal Bay (NV); Remote; USD 110,000 - 160,000; Full time

Job summary

Commence is seeking an Information System Security Officer to lead security assessments and authorization for federal programs, reporting to the Information Security Manager. This role requires 5+ years of information assurance experience, including 3+ years as an ISSO or A&A lead, and a bachelor’s degree in a related field.

The ISSO will partner with the CIO, Cybersecurity Engineers, Compliance Analysts, and project teams to ensure RMF processes, prepare SSP/POA&M, and maintain agency-wide

Qualifications

• 5+ years of information assurance or cybersecurity experience, including 3+ years as an ISSO or A&A lead for federal information systems.
• Experience with RMF/NIST 800-37 and security documentation like SSP and POA&M.
• Familiar with CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Pub 1075/4812, DHS 4300A.
• Experience with vulnerability scanning outputs (Tenable Nessus, Defender, AWS Inspector) and translating findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• Ability to work with CIO, Compliance Analysts, project teams.

Responsibilities

• Serve as designated ISSO for assigned federal systems and liaison to agency ISSOs, Authorizing Officials, assessors and prime contractor security teams.
• Develop and maintain the System Security and Privacy Plan, risk assessment, contingency plan and annual test, incident response plan, configuration management plan, and interconnection agreements for ISSM review.
• Lead system-level security assessments and the RMF lifecycle from categorization to authorization and ongoing monitoring.
• Coordinate with CMS, VA, DoD, IRS assessments and prepare evidence with Compliance Analysts.
• Maintain compliance with CMS ARS/IS2P2, SOC 2, NIST CSF 800-53/800-171, HIPAA, HITRUST, ISO 27001; support audits and customer security questionnaires.
• Work with cross-functional teams to ensure security milestones are integrated into project plans.

Skills

Information assurance

Cybersecurity

ISSO experience

Federal information systems

NIST RMF

Remediation coordination

Education

Bachelor's degree in a related field

Tools

Tenable Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence is seeking an Information System Security Officer to lead security assessments and authorization for federal programs, reporting to the Information Security Manager. This role requires 5+ years of information assurance experience, including 3+ years as an ISSO or A&A lead, and a bachelor’s degree in a related field.

The ISSO will partner with the CIO, Cybersecurity Engineers, Compliance Analysts, and project teams to ensure RMF processes, prepare SSP/POA&M, and maintain agency-wide