Remote Federal ISSO — Security & Authorization Lead

Commence; Kansas; Remote; USD 110,000 - 160,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments and an authorization program across federal systems. You will own the RMF lifecycle, prepare security plans, and coordinate with the CIO, ISSM, and project teams to maintain continuous authorization and rapid remediation.

The role requires 5+ years in information assurance, US citizenship, and SIs alignment with CMS ARS/IS2P2, NIST SP 800-171/CMMC, and HIPAA.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5+ years information assurance or cybersecurity experience, including federal roles.
• Experience with RMF/NIST SP 800-53/171, CMS ARS/IS2P2, VA 6500, and DFARS.
• Familiarity with vulnerability scanning and remediation (Tenable/Nessus, SCAP/STIG).
• U.S. citizenship and ability to obtain federal Public Trust.
• Strong written and oral communication; able to coordinate cross-functionally.

Responsibilities

• Serve as the designated ISSO for federal systems and liaison to agency ISSOs.
• Coordinate security milestones into project plans and assess system changes.
• Prepare and maintain ATO packages and related security documentation.
• Maintain POA&M and track remediation with Cybersecurity Engineers and IT Operations.
• Lead CMS, VA, and DoD assessments and evidence collection.
• Ensure compliance with agency requirements (CMMC 2.0, HIPAA, etc.).
• Respond to security incidents and report to ISSM and CIO.
• Manage contract security deliverables and personnel security tasks.
• Support internal audits and control assessments.

Skills

Writer

Security mindset

Citizenship required

Ability to obtain clearance

Education

Bachelor’s degree or equivalent experience

5+ years information assurance/cybersecurity

Tools

Tenable/Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments and an authorization program across federal systems. You will own the RMF lifecycle, prepare security plans, and coordinate with the CIO, ISSM, and project teams to maintain continuous authorization and rapid remediation.

The role requires 5+ years in information assurance, US citizenship, and SIs alignment with CMS ARS/IS2P2, NIST SP 800-171/CMMC, and HIPAA.