Remote ISSO for Federal Systems & ATO Leadership

Commence; Lincoln (NE); Remote; USD 120,000 - 150,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will maintain system authorizations and ensure compliance with RMF across CMS, VA, DoD, IRS, and DHS/TSA engagements.

The role requires 5+ years in information assurance (3+ as ISSO/A&A lead), a related bachelor's degree, and strong writing and coordination skills to work with CIO, Compliance Analysts, Project Managers, and IT Ops.

Qualifications

• 5+ years of information assurance or cybersecurity experience, including 3+ years as an ISSO or A&A lead for federal information systems; bachelor's degree in a related field or equivalent experience.
• Has personally taken at least one federal system through an initial ATO or reauthorization under NIST SP, including SSP authorship and POA&M management in various agency GRC platforms.
• Working knowledge of at least two of: CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A. Experience with FedRAMP and HIPAA a plus.
• Comfortable reading vulnerability and configuration scan output (Tenable/Nessus, Defender, AWS Inspector, SCAP/STIG Viewer) and translating findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• A clear, precise writer who can run several systems and deadline clocks at once.
• CompTIA Security+ (or higher DoD 8140-qualifying certification) required. CISSP, CGRC (formerly CAP), CISA, or CCSP preferred.
• U.S. citizenship and ability to obtain and maintain federal Public Trust suitability required.

Responsibilities

• ISSO designation and liaison with agency ISSOs, Authorizing Officials, assessors, and prime contractor security teams.
• Project and cross-functional coordination to integrate security milestones into project plans.
• Prepare and maintain ATO packages, SSPs, risk assessments, privacy impact assessments, contingency and incident response plans.
• Maintain POA&M in agency GRC platforms; review vulnerability and configuration scans; coordinate remediation with Cybersecurity Engineers and IT Operations.
• Lead CMS/VA/DoD/IRS assessments and evidence collection with Compliance Analysts.
• Maintain compliance with CMS ARS/IS2P2, VA 6500, DFARS, NIST SP 800-171/CMMC, IRS pub 1075/4812, DHS 4300A, HIPAA, and related frameworks.
• Respond to security incidents; coordinate notifications with Privacy Officer and prime contractors.
• Complete system-level contract security deliverables and personnel security tasks.
• Support audits and control assessments for SOC 2, NIST CSF/SP 800-53/800-171, HIPAA, HITRUST, ISO/IEC 27001.

Skills

ISSO leadership

RMF/NIST SP 800-37

GRC platforms & risk mgmt

Vulnerability scanning

Cloud familiarity (AWS / Azure)

Written communication

US citizenship

Education

Bachelor's degree or equivalent experience

Tools

CMS ARS/IS2P2

FedRAMP & HIPAA knowledge

SCAP/STIG Viewer

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal programs. You will maintain system authorizations and ensure compliance with RMF across CMS, VA, DoD, IRS, and DHS/TSA engagements.

The role requires 5+ years in information assurance (3+ as ISSO/A&A lead), a related bachelor's degree, and strong writing and coordination skills to work with CIO, Compliance Analysts, Project Managers, and IT Ops.