Remote Federal ISSO - RMF/NIST Expert

DOMA Technologies, LLC; Virginia Beach (VA); Remote; USD 120,000 - 170,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems supporting CMS, VA, DoD, IRS, and DHS.

You will collaborate with the CIO, cybersecurity engineers, compliance analysts, and project teams; manage ATO packages, RMF processes, and incident response. This is a remote role with 15–25% travel; headquarters in Virginia Beach, VA, and candidates in eligible states are welcome.

Qualifications

• 5+ years information assurance or cybersecurity experience with federal programs.
• 3+ years as an ISSO or A&A lead for federal systems; SSP authorship and POA&M management.
• Familiarity with NIST RMF, SP 800-37/53, and security controls; experience with FedRAMP and HIPAA is a plus.
• US citizenship and ability to obtain/maintain federal Public Trust suitability.

Responsibilities

• Designate and liaison as ISSO for assigned federal systems and interact with agency ISSOs and assessors.
• Coordinate security milestones with project managers and ensure security considerations are integrated into plans.
• Manage Security Assessment and Authorization lifecycle; author/maintain SSP, risk assessments, PIA, and contingency/incident response plans.
• Maintain POA&Ms in agency systems; track remediation with engineers and IT operations; prepare continuous-monitoring reports.
• Prepare system security documentation for CMS VA DoD IRS and other agency assessments; ensure compliance with current agency requirements.
• Handle incident reporting and escalation; manage contract security deliverables and personnel security tasks.
• Support internal audits and controls against NIST, HIPAA, HITRUST, and ISO standards.

Skills

ISSO experience

NIST RMF

Federal systems knowledge

FedRAMP knowledge

Education

Bachelor's degree in a related field

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems supporting CMS, VA, DoD, IRS, and DHS.

You will collaborate with the CIO, cybersecurity engineers, compliance analysts, and project teams; manage ATO packages, RMF processes, and incident response. This is a remote role with 15–25% travel; headquarters in Virginia Beach, VA, and candidates in eligible states are welcome.