Remote Federal ISSO — Security & Compliance Lead

Commence; Baltimore (MD); Remoto; USD 110.000 - 170.000; Tempo pieno

Descrizione del lavoro

Commence is seeking an Information System Security Officer to lead security assessments and authorization for federal systems in a remote-capable role. You will partner with CIO, engineers and project managers to ensure continuous authorization and compliance across CMS, VA, DoD, IRS and DHS programs.

The role requires 5+ years in information assurance, 3+ years as ISSO/A&A, and strong knowledge of NIST RMF, SP 800-171/CMMC, and HIPAA controls.

Competenze

• 5+ years information assurance or cybersecurity experience, including 3+ years as ISSO/A&A lead.
• Bachelor's degree in a related field or equivalent experience.
• Experience with federal agencies and RMF/ATO processes.
• Knowledge of NIST SP 800-171/CMMC and HIPAA applicable frameworks.
• Clear written communication and ability to coordinate across teams.

Mansioni

• Serve as designated ISSO for assigned federal systems and liaison to agency ISSOs.
• Coordinate security milestones in project plans and assess changes for security impact.
• Prepare and maintain ATO packages and related documentation.
• Maintain continuous monitoring and POA&M; track remediation with engineers.
• Lead assessments for CMS VA DoD IRS, and other agency reviews.

Conoscenze

Information assurance

Cybersecurity

Federal RMF

Vulnerability management

Written communication

Formazione

Bachelor's degree in a related field

CompTIA Security+ or higher

Strumenti

Tenable/Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Azure/M365

Descrizione del lavoro

Commence is seeking an Information System Security Officer to lead security assessments and authorization for federal systems in a remote-capable role. You will partner with CIO, engineers and project managers to ensure continuous authorization and compliance across CMS, VA, DoD, IRS and DHS programs.

The role requires 5+ years in information assurance, 3+ years as ISSO/A&A, and strong knowledge of NIST RMF, SP 800-171/CMMC, and HIPAA controls.