Remote Federal ISSO & RMF Lead for Health Systems

Commence; Massachusetts; Remote; USD 110,000 - 170,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will own the day-to-day security operations, coordinate with CIO and engineers, and drive agency assessments and compliance with NIST, RMF, and HIPAA standards.

You will collaborate with Contracts, HR, and Operations to ensure security deliverables, manage risk, and maintain authorizations across CMS, VA, DoD/DHA, IRS, and DHS programs.

Qualifications

• 5+ years in information assurance or cybersecurity
• 3+ years as ISSO or A&A lead for federal systems
• Bachelor’s degree in a related field or equivalent experience
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF, and NIST SP 800-171/CMMC
• Experience with FedRAMP and HIPAA is a plus
• Familiarity with vulnerability scans and remediation
• U.S. citizenship and ability to obtain Public Trust
• Clear, precise writing

Responsibilities

• Lead ISSO designation and liaison for assigned federal systems
• Coordinate security milestones with project plans and assess system changes
• Prepare and maintain SSP, risk assessment, and POA&M
• Maintain continuous monitoring and reporting to agencies
• Lead CMS/VA/DoD assessments and evidence collection
• Ensure compliance with agency requirements (NIST SP 800-171/CMMC, etc.)
• Respond to security incidents and incident response planning
• Handle contract security deliverables and personnel security
• Support internal audits and control assessments

Skills

Information assurance

Cybersecurity experience

NIST RMF

Federal agencies knowledge

Policy writing

Education

Bachelor's degree

Tools

Tenable Nessus

SCAP/STIG Viewer

AWS

Microsoft 365/Azure

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will own the day-to-day security operations, coordinate with CIO and engineers, and drive agency assessments and compliance with NIST, RMF, and HIPAA standards.

You will collaborate with Contracts, HR, and Operations to ensure security deliverables, manage risk, and maintain authorizations across CMS, VA, DoD/DHA, IRS, and DHS programs.