Remote ISSO: Federal Security & Authorization Lead

Commence; Maryland City (MD); Teletrabalho; USD 110 000 - 165 000; Tempo integral

Resumo da oferta

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will coordinate with the CIO, Cybersecurity Engineers, Compliance Analysts, and project teams to keep agency-authorized systems and risk statuses current.

You must have 5+ years in information assurance, 3+ years as ISSO/A&A lead, and a Security+ or higher cert.

Qualificações

• 5+ years in information assurance or cybersecurity, including 3+ years as ISSO or A&A lead for federal information systems; bachelor’s degree in a related field or equivalent experience.
• Has personally taken at least one federal system through an initial ATO or reauthorization under NIST SP, including SSP authorship and POA&M management in various agency GRC platforms.
• Familiarity with CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A. Experience with FedRAMP and HIPAA a plus.
• Comfortable reading vulnerability and configuration scan output and translating findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• Clear, precise writer who can manage multiple systems and deadlines.

Responsabilidades

• ISSO designation and liaison for assigned federal systems; primary system-level security liaison to agency ISSOs and prime contractor security teams.
• Coordinate with project managers to embed security milestones into project plans and assess security impact of changes.
• Prepare and maintain ATO packages; create and maintain SSP, risk assessments, Privacy Impact Assessments, and contingency/incident response plans.
• Maintain POA&M in agency GRC platforms; review vulnerability scans and coordinate remediation with Cybersecurity Engineers and IT Operations.
• Lead CMS Security Controls Assessments, VA and DoD assessments, and IRS Safeguards reviews; support evidence collection and findings response.
• Maintain compliance with CMS ARS/IS2P2, VA Handbook 6500 series, DFARS, NIST SP 800-171/CMMC, IRS publications, DHS 4300A, and HIPAA.

Conhecimentos

ISSO experience

Federal systems

Risk management

Communication skills

Formação académica

Bachelor’s degree in related field

Security+ or higher

Ferramentas

NIST RMF tools

Nessus / Tenable

STIG Viewer

Azure

Descrição da oferta de emprego

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will coordinate with the CIO, Cybersecurity Engineers, Compliance Analysts, and project teams to keep agency-authorized systems and risk statuses current.

You must have 5+ years in information assurance, 3+ years as ISSO/A&A lead, and a Security+ or higher cert.