Remote ISSO: Federal RMF ATO Expert

Commence; Oregon; Hybrid; USD 110,000 - 160,000; Full time

Job summary

Commence' is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will partner with the CIO, cybersecurity engineers, compliance analysts, and project teams to maintain active authorization to operate for CMS, VA, DoD, IRS, and DHS/TSA programs.

As the designated ISSO, you will manage ATO packages, develop SSPs, perform risk analyses, and coordinate remediation with IT Operations while ensuring

Qualifications

• 5+ years in information security with 3+ years as ISSO/A&A lead for federal systems
• Experience leading at least one federal system through initial ATO or reauthorization under NIST SP 800-37
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC
• Able to read vulnerability scans and translate findings into remediation tasks
• US citizenship and ability to obtain federal Public Trust

Responsibilities

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs, AO, assessors, and prime contractor security teams
• Lead RMF/ATO lifecycle from categorization to authorization and ongoing monitoring
• Author and maintain SSP, risk assessment, Privacy Impact Assessment, contingency plan, and incident response plan
• Maintain POA&M in agency GRC platforms and coordinate remediation with Cybersecurity Engineers and IT Operations
• Prepare for CMS, VA, DoD assessments; ensure compliance with HIPAA, NIST CSF, 800-53/171 and related frameworks

Skills

ISSO experience

Federal information security

Written communication

Security governance

US citizenship

Education

Bachelor's degree

Security+ certification

Tools

Tenable Nessus

AWS Inspector

SCAP/STIG Viewer

Microsoft 365/Azure

Job description

Commence' is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will partner with the CIO, cybersecurity engineers, compliance analysts, and project teams to maintain active authorization to operate for CMS, VA, DoD, IRS, and DHS/TSA programs.

As the designated ISSO, you will manage ATO packages, develop SSPs, perform risk analyses, and coordinate remediation with IT Operations while ensuring