Remote ISSO – Federal Systems & Compliance Leader

Commence; Tennessee; Remote; USD 110,000 - 160,000; Full time

Job summary

Commence seeks an Information Systems Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will coordinate with CIO, ISSM, engineers, and project teams across the company.

You will ensure compliance with RMF, NIST controls, and agency requirements, while managing incident response and documentation across CMS, VA, DoD, IRS, and DHS programs.

Qualifications

• 5+ years of information assurance or cybersecurity experience including 3+ years as ISSO/A&A lead for federal systems.
• Working knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC.
• Comfortable reading vulnerability and configuration scan output and translating findings into remediation tasks.
• U.S. citizenship and ability to obtain federal Public Trust suitability.

Responsibilities

• ISSO designation and liaison for assigned federal systems to agency ISSOs and officials.
• Partner with Project Managers to embed security milestones in project plans.
• Run Security Assessment and Authorization lifecycle under RMF (SP 800-37) from categorization to reauthorization.
• Maintain POA&M in agency GRC platforms and track remediation with engineers.
• Lead CMS/VA/DoD/IRS assessments; support evidence collection and findings response.
• Maintain compliance with agency requirements including CMMC 2.0 and HIPAA variants.
• Act as first responder for security/privacy incidents; notify ISSM and CIO.
• Complete system-level contract security deliverables and personnel security tasks.
• Support internal audits and control assessments against SOC 2, NIST CSF/800-53/800-171, HIPAA, HITRUST, ISO 27001.

Skills

Information security

Federal requirements

Documentation

Written communication

Education

Bachelor's degree in a related field

Tools

Tenable Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence seeks an Information Systems Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will coordinate with CIO, ISSM, engineers, and project teams across the company.

You will ensure compliance with RMF, NIST controls, and agency requirements, while managing incident response and documentation across CMS, VA, DoD, IRS, and DHS programs.