Remote ISSO — Federal RMF/NIST Security Lead

Commence; Elm (PA); Remote; USD 90,000 - 140,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security for federal programs. You will own day-to-day assessment, authorization, and continuous monitoring, reporting to the ISSM, and coordinating with CIO and Cybersecurity Engineers.

You will develop ATO packages, maintain SSPs and POA&Ms, lead CMS/VA/DoD assessments, and ensure compliance with NIST SP 800-53/171, HIPAA, and related federal requirements. Remote work is supported.

Qualifications

• The position requires 5+ years in information assurance or cybersecurity, including 3+ years as an ISSO or A&A lead.
• Experience taking federal systems through initial ATO or reauthorization, with SSP authorship and POA&M management.
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC, IRS Pub 1075 & 4812, DHS 4300A, and HIPAA/CUI handling.
• Ability to read vulnerability and configuration scan outputs and translate findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• Strong writing ability and ability to manage multiple systems and deadlines.
• Security+ (or higher DoD 8140-qualifying) required; CISSP/CGRC/CISA/CCSP preferred.
• U.S. citizenship and ability to obtain federal Public Trust suitability.

Responsibilities

• ISSO designation and liaison for assigned federal systems and agency contacts.
• Coordinate security milestones with Project Managers and assess security impact of changes.
• Develop and maintain ATO packages, SSPs, risk assessments, and POA&Ms.
• Maintain POA&Ms in agency GRC platforms and track remediation with teams.
• Lead CMS/VA/DoD/IRS assessments and evidence collection with Compliance Analysts.
• Ensure compliance with CMS ARS/IS2P2, VA 6500, NIST SP 800-171/CMMC, IRS publications, and HIPAA.
• Respond to security and privacy incidents and coordinate with Privacy Officer and CIO.

Skills

Information assurance

Cybersecurity

ISSO/A&A lead

ATO experience

Vulnerability scanning

AWS/Azure familiarity

Security+ certification

U.S. citizenship

Education

Bachelor's degree or equivalent experience

Tools

CMS ARS/IS2P2

VA 6500

DoD RMF

NIST SP 800-171/CMMC

IRS Pub 1075 & 4812

DHS 4300A

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security for federal programs. You will own day-to-day assessment, authorization, and continuous monitoring, reporting to the ISSM, and coordinating with CIO and Cybersecurity Engineers.

You will develop ATO packages, maintain SSPs and POA&Ms, lead CMS/VA/DoD assessments, and ensure compliance with NIST SP 800-53/171, HIPAA, and related federal requirements. Remote work is supported.