Remote ISSO: Federal Systems & Compliance Lead

Commence; West Virginia; Remote; USD 105,000 - 140,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead day-to-day security assessments, authorization, and continuous monitoring for federal programs. You will own SSPs, risk assessments, and contingency planning while coordinating with CIOs, engineers, and project teams to meet agency timelines.

The role requires 5+ years in information assurance, 3+ years as ISSO/A&A lead, U.S. citizenship, and strong writing skills.

Qualifications

• 5+ years of information assurance or cybersecurity experience.
• 3+ years as ISSO or A&A lead for federal information systems; bachelor’s degree in a related field or equivalent experience.
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC; FedRAMP and HIPAA a plus.
• Ability to read vulnerability and configuration scan output and translate findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• Clear, precise writing with ability to manage multiple systems and deadlines.
• U.S. citizenship and ability to obtain and maintain federal Public Trust suitability.

Responsibilities

• Serve as designated ISSO for assigned federal systems and liaison to agency ISSOs and officials.
• Coordinate with CIO, cybersecurity engineers, compliance analysts, and project teams.
• Prepare Security Assessment and Authorization artifacts (SSP, risk assessment, Privacy Impact Assessment, contingency plan).
• Maintain POA&M and coordinate remediation with IT Operations.
• Lead agency assessments and ensure compliance with CMS, VA, DoD, IRS requirements.
• Support internal audits and control assessments against CSF, SP 800-53/171, HIPAA, and related frameworks.

Skills

Information security

NIST RMF

SSP authorship

Vulnerability scanning

Education

Bachelor's degree in a related field

Equivalent experience

Tools

Tenable Nessus

SCAP/STIG Viewer

AWS

Azure

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead day-to-day security assessments, authorization, and continuous monitoring for federal programs. You will own SSPs, risk assessments, and contingency planning while coordinating with CIOs, engineers, and project teams to meet agency timelines.

The role requires 5+ years in information assurance, 3+ years as ISSO/A&A lead, U.S. citizenship, and strong writing skills.