Remote Federal ISSO & Security Compliance Lead

Commence; Clayton (NC); Remote; USD 110,000 - 170,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead the security posture of federal systems supporting CMS, VA, DoD/DHA, IRS, and DHS. You will own the security assessment and authorization lifecycle, from SSP to continuous monitoring, and coordinate with CIO, engineers, compliance, and project teams.

You will prepare ATOs, manage POA&Ms, monitor vulnerabilities, and ensure alignment with NIST SP 800-53/171 and related agency requirements.

Qualifications

• 5+ years information assurance or cybersecurity experience; 3+ years as ISSO or A&A lead.
• Bachelor’s degree or equivalent experience.
• Knowledge of at least two security frameworks (CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC, IRS 1075/4812, DHS 4300A).
• Familiar with vulnerability scans and remediation.
• US citizenship and ability to obtain Public Trust.

Responsibilities

• Serve as the designated ISSO for assigned federal systems and liaison to agency ISSOs, Authorizing Officials, assessors, and prime contractor security teams.
• Coordinate security milestones in project plans, assess security impact of changes, and maintain visibility of federal deliverables.
• Prepare and maintain ATO packages and documentation (SSP, risk assessment, PIA, contingency plan, incident response plan).
• Maintain POA&M, review vulnerability scans, and track remediation with engineers and IT Operations.
• Lead CMS, VA, DoD assessments and IRS Safeguards reviews; ensure agency requirements compliance.
• Support internal audits and cross-framework control testing and evidence collection.
• Handle contract security deliverables and personnel security tasks; participate in on-call coverage.

Skills

InfoSec expertise

ISSO/A&A leadership

Clear writing

Multitasking under deadlines

Public Trust eligibility

Education

Bachelor’s degree in a related field or equivalent experience

Tools

Tenable/Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead the security posture of federal systems supporting CMS, VA, DoD/DHA, IRS, and DHS. You will own the security assessment and authorization lifecycle, from SSP to continuous monitoring, and coordinate with CIO, engineers, compliance, and project teams.

You will prepare ATOs, manage POA&Ms, monitor vulnerabilities, and ensure alignment with NIST SP 800-53/171 and related agency requirements.