Remote ISSO - Federal Systems Security Leader

Commence; Milton (MA); Remoto; USD 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

Commence is seeking an experienced Information System Security Officer to lead security assessment, authorization, and continuous monitoring for federal systems. You will report to the Information Security leadership and collaborate across CIO, Compliance, and Operations teams in a remote, federal-focused environment.

The role requires strong RMF knowledge, agency compliance, and hands-on experience with accreditation packages, vulnerability management, and incident response planning.

Competenze

• 5+ years in information assurance; 3+ years as ISSO or A&A lead.
• Bachelor’s degree or equivalent experience in a related field.
• Active security certifications (CISSP, CISA, or similar) preferred; US citizenship required.

Mansioni

• Serve as designated ISSO for federal systems and primary system-level security liaison.
• Collaborate with CIO, Cybersecurity Engineers, and Compliance Analysts on security milestones.
• Lead ATO/SSP development and maintenance, risk assessments, and POA&M management.
• Oversee continuous monitoring, vulnerability reviews, and regulatory mapping for agency timelines.
• Coordinate agency security assessments (CMS, VA, DoD, IRS, DHS) and evidence collection.

Conoscenze

Information security experience

ISSO/A&A lead experience

CISSP or equivalent

US citizenship

Travel willingness

Formazione

Bachelor's degree or equivalent

Strumenti

NIST RMF

FedRAMP

SCAP/STIG

Tenable/Nessus

AWS/Azure

Descrizione del lavoro

Commence is seeking an experienced Information System Security Officer to lead security assessment, authorization, and continuous monitoring for federal systems. You will report to the Information Security leadership and collaborate across CIO, Compliance, and Operations teams in a remote, federal-focused environment.

The role requires strong RMF knowledge, agency compliance, and hands-on experience with accreditation packages, vulnerability management, and incident response planning.