Remote Federal ISSO & RMF Compliance Leader

Commence; Ohio; Remote; USD 90,000 - 130,000; Full time

Job summary

Commence seeks an Information System Security Officer to lead security across federal systems, reporting to the CIO and working with Cybersecurity Engineers and Compliance Analysts. You will manage ATOs, risk assessments, and continuous monitoring to keep systems compliant for CMS, VA, DoD, IRS, and DHS workloads.

Ideal candidates bring 5+ years in information assurance, 3+ as ISSO/A&A lead, and strong RMF, NIST 800-171, and HIPAA knowledge. Remote candidates across the U.S.

Qualifications

• 5+ years of information assurance or cybersecurity experience, including 3+ years as an ISSO or A&A lead for federal information systems.
• Experience with federal RMF-based assessments and ATOs, SSP authorship, and POA&M management.
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC, IRS 1075/4812, DHS 4300A, CUI, FISMA, HIPAA.
• Familiarity with vulnerability scans and translating findings into remediation tasks.
• Experience with AWS and Microsoft 365/Azure.
• Strong writing and coordination skills for multiple systems and deadlines.
• Active security clearances or ability to obtain Public Trust.

Responsibilities

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs and officials.
• Coordinate security milestones within project plans and ensure timely deliverables.
• Prepare and maintain ATO packages, SSPs, risk assessments, and privacy documents.
• Maintain POA&M in agency GRC platforms and report vulnerabilities and remediation.
• Lead CMS, VA, DoD, and IRS assessments and respond to findings.
• Ensure compliance with agency requirements (HIPAA, NIST, CMMC, etc.).
• Act as first responder for security and privacy incidents and coordinate notifications.

Skills

ISSO lead

NIST RMF

FedRAMP

CISA/CISSP

Incident response

Vulnerability mgmt

Cloud platforms

HIPAA knowledge

Education

Bachelor's degree in related field

Tools

Tenable Nessus

SCAP/STIG Viewer

AWS Inspector

GRC platforms

Job description

Commence seeks an Information System Security Officer to lead security across federal systems, reporting to the CIO and working with Cybersecurity Engineers and Compliance Analysts. You will manage ATOs, risk assessments, and continuous monitoring to keep systems compliant for CMS, VA, DoD, IRS, and DHS workloads.

Ideal candidates bring 5+ years in information assurance, 3+ as ISSO/A&A lead, and strong RMF, NIST 800-171, and HIPAA knowledge. Remote candidates across the U.S.