Remote Federal ISSO & RMF Security Lead

Commence; Alton (IL); Teletrabalho; USD 110 000 - 150 000; Tempo integral

Resumo da oferta

Commence seeks an experienced Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will partner with CIO, security engineers, and compliance teams to ensure systems operate under NIST RMF, HIPAA, and CMS/SOC 2 controls.

You will manage ATO processes, create SSPs, review vulnerability reports, and coordinate remediation with IT operations.

Qualificações

• 5+ years of information assurance or cybersecurity experience, including federal systems experience.
• Experience acting as ISSO or A&A lead for federal information systems, with SSP authorship.
• Familiarity with NIST SP 800-37 RMF process and agency compliance requirements.
• Ability to read vulnerability scans and translate findings into remediation tasks.
• Knowledge of cloud platforms (AWS, Azure) and security controls.
• U.S. citizenship and ability to obtain/maintain Public Trust for federal work.

Responsabilidades

• Serve as the designated ISSO for assigned federal systems and liaison to agency ISSOs and Authorizing Officials.
• Coordinate security milestones in project plans and ensure timely deliverables.
• Manage the Security Assessment and Authorization lifecycle from categorization to reauthorization.
• Maintain continuous monitoring, POA&M, and vulnerability remediation with cross-functional teams.
• Support agency assessments (CMS, VA, DoD, IRS) and evidence collection.
• Ensure compliance with CMS ARS, NIST SP 800-171/CMMC, HIPAA, and other standards.

Conhecimentos

Information security

Security liaison

Project coordination

Policy compliance

Writing & documentation

Formação académica

Bachelor’s degree or equivalent experience

Ferramentas

NIST RMF

SSP authorship

GRC platforms

Tenable Nessus

SCAP/STIG Viewer

AWS

Azure

Descrição da oferta de emprego

Commence seeks an experienced Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will partner with CIO, security engineers, and compliance teams to ensure systems operate under NIST RMF, HIPAA, and CMS/SOC 2 controls.

You will manage ATO processes, create SSPs, review vulnerability reports, and coordinate remediation with IT operations.