Remote Federal ISSO — RMF/NIST Lead

Commence; Yuma (AZ); A distancia; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments, authorization, and continuous monitoring for federal programs. You will own the RMF lifecycle, author and maintain security documentation, and coordinate with CIO, engineers, and compliance teams.

The role requires 5+ years in information assurance, 3+ years in ISSO/A&A, and deep familiarity with federal standards. Remote-friendly with travel as needed; US citizenship is required.

Formación

• 5+ years of information assurance or cybersecurity experience.
• 3+ years as an ISSO or A&A lead for federal systems.
• Bachelor’s degree or equivalent experience.
• Working knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A, HIPAA, Privacy Act.
• Certifications: CompTIA Security+ required; CISSP/CGRC/CISA/CCSP preferred.
• U.S. citizenship and ability to obtain federal Public Trust.

Responsabilidades

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs.
• Coordinate security milestones with project managers.
• Prepare ATO packages under RMF (SP 800-37) from categorization to authorization and reauthorization.
• Maintain SSP, risk assessment, Privacy Impact Assessment, contingency and incident response plans.
• Monitor vulnerabilities and implement remediation with teams.
• Lead CMS VA/DoD/IRS assessments and evidence collection.
• Maintain compliance with agency requirements (ARS/IS2P2, etc.).
• Respond to security incidents as first responder.
• Complete contract security deliverables; manage personnel security.
• Support internal audits and control assessments (SOC 2, NIST CSF, SP 800-53/171, HIPAA, HITRUST, ISO 27001).

Conocimientos

Information security

NIST RMF

Federal compliance

Policy writing

Educación

Bachelor’s degree or equivalent experience

Herramientas

Tenable/Nessus

Defender

SCAP/STIG Viewer

AWS/Azure

Descripción del empleo

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments, authorization, and continuous monitoring for federal programs. You will own the RMF lifecycle, author and maintain security documentation, and coordinate with CIO, engineers, and compliance teams.

The role requires 5+ years in information assurance, 3+ years in ISSO/A&A, and deep familiarity with federal standards. Remote-friendly with travel as needed; US citizenship is required.