Remote ISSO - Federal Security & Compliance Lead

Commence; Town of King (WI); À distance; USD 110 000 - 170 000; Plein temps

Avantages offerts par ce poste

Remote-friendly

Competitive salary

401(k) plan

Résumé du poste

Commence seeks an experienced Information System Security Officer to own security assessment, authorization, and continuous monitoring for federal systems in a remote capacity. You will be the primary ISSO and liaison, guiding risk management with the CIO, ISSM, and engineering teams.

You will prepare and maintain key artifacts (SSP, risk assessments, PIA, contingency plans) and lead agency assessments and audits across CMS, VA, DoD, IRS, and DHS requirements. A strong communicator is essential.

Qualifications

• 5+ years of information assurance or cybersecurity experience with ISSO/A&A roles for federal systems.
• Experience taking a federal system through initial ATO/reauthorization under NIST SP.
• Familiarity with CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC, IRS 1075/4812, DHS 4300A.
• Ability to read vulnerability scans and translate findings into remediation tasks.

Responsabilités

• Serve as the designated ISSO for federal systems and liaison to agency ISSOs and Authorizing Officials.
• Coordinate security milestones into project plans and track remediation timelines.
• Prepare and maintain SSP, risk assessments, Privacy Impact Assessments, and contingency plans.
• Lead CMS, VA, DoD assessments and evidence collection with Compliance Analysts.
• Support audits against SOC 2, NIST CSF, SP 800-53/171, HIPAA, HITRUST, and ISO 27001.

Connaissances

ISSO experience

Cybersecurity

Communication

Policy writing

Formation

Bachelor’s degree

Outils

Tenable Nessus

SCAP/STIG Viewer

AWS

Azure

Description du poste

Commence seeks an experienced Information System Security Officer to own security assessment, authorization, and continuous monitoring for federal systems in a remote capacity. You will be the primary ISSO and liaison, guiding risk management with the CIO, ISSM, and engineering teams.

You will prepare and maintain key artifacts (SSP, risk assessments, PIA, contingency plans) and lead agency assessments and audits across CMS, VA, DoD, IRS, and DHS requirements. A strong communicator is essential.