Remote Federal ISSO: Security & Compliance Lead

Commence; Montana; Remote; USD 110,000 - 140,000; Full time

Job summary

Commence seeks an experienced Information Security Officer (ISSO) to lead security for federal systems and serve as the primary system-level liaison with agencies and prime contractors. You will drive RMF activities, author key security documents, and coordinate risk remediation with cybersecurity engineers and IT operations.

The role requires 5+ years in information assurance or cybersecurity, 3+ years as ISSO/A&A lead, and familiarity with CMS ARS/IS2P2, DoD RMF, NIST SP 800-171/CMMC.

Qualifications

• 5+ years of information assurance or cybersecurity experience, including work on federal information systems.
• 3+ years as an ISSO or A&A lead.
• Bachelor’s degree in a related field or equivalent experience.

Responsibilities

• Serve as the designated ISSO for assigned federal systems and liaison to agency ISSOs and Authorizing Officials.
• Coordinate across project teams to embed security milestones and assess changes before deployment.
• Lead the Security Assessment and Authorization lifecycle under RMF (NIST SP 800-37).
• Author and maintain SSP, risk assessments, Privacy Impact Assessments, contingency and incident response plans.
• Maintain POA&Ms in agency GRC platforms and coordinate remediation with engineers and IT Ops.
• Prepare for CMS, VA, DoD assessments, and IRS Safeguards reviews; gather evidence with Compliance Analysts.

Skills

Information assurance

Cybersecurity

ISSO experience

A&A lead (federal)

Federal systems

Education

Bachelor’s degree in a related field

Tools

Tenable/Nessus

Defender

SCAP/STIG Viewer

AWS

Microsoft 365/Azure

Job description

Commence seeks an experienced Information Security Officer (ISSO) to lead security for federal systems and serve as the primary system-level liaison with agencies and prime contractors. You will drive RMF activities, author key security documents, and coordinate risk remediation with cybersecurity engineers and IT operations.

The role requires 5+ years in information assurance or cybersecurity, 3+ years as ISSO/A&A lead, and familiarity with CMS ARS/IS2P2, DoD RMF, NIST SP 800-171/CMMC.