Remote ISSO for Federal Systems & Compliance

Commence; Accident (AR); Remote; USD 110,000 - 160,000; Full time

Job summary

Commence is seeking an Information System Security Officer (ISSO) to lead security for federal systems. You will own RMF/DP lifecycle, author the SSP, and coordinate with CIO, ISSM, and program teams to ensure continuous authorization and strong controls.

Remote position with some travel; U.S. citizenship required. You will monitor vulnerabilities, manage risk, and respond to security incidents across CMS, VA, DoD, IRS, and DHS programs, ensuring compliance with NIST SPs and DFARS.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5+ years information assurance or cybersecurity experience, including 3+ years as ISSO/A&A lead.
• Experience with CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC; FedRAMP/HIPAA a plus.
• Ability to read vulnerability output (Tenable/Nessus, Defender, AWS Inspector, SCAP/STIG Viewer) and translate to remediation.
• Familiarity with AWS and Microsoft 365/Azure.
• Clear, precise writing and multitasking under deadlines.
• U.S. citizenship and ability to obtain federal Public Trust.

Responsibilities

• Serve as the designated ISSO for assigned federal systems.
• Coordinate with CIO, ISSM, project managers and other departments.
• Lead ATO packages and RMF lifecycle from initiation to authorization.
• Maintain POA&M and vulnerability scans; track remediation with engineers.
• Prepare CMS, VA, DoD assessments and evidence collection.
• Ensure compliance with ARS, IS2P2, DFARS, NIST SP 800-171/CMMC, IRS 1075/4812; HIPAA.
• Respond to security incidents and act as first responder when needed.
• Complete contract security deliverables and personnel security tasks.
• Support internal audits and control assessments; assist external audits.

Skills

Information security

Cybersecurity

NIST RMF

FedRAMP

Vulnerability assessment

Policy compliance

Cloud security

Writing

Communication

Multitasking

Education

Bachelor’s degree in a related field

Tools

Tenable Nessus

SCAP/STIG Viewer

GRC platforms

Defender

AWS Inspector

Azure

Job description

Commence is seeking an Information System Security Officer (ISSO) to lead security for federal systems. You will own RMF/DP lifecycle, author the SSP, and coordinate with CIO, ISSM, and program teams to ensure continuous authorization and strong controls.

Remote position with some travel; U.S. citizenship required. You will monitor vulnerabilities, manage risk, and respond to security incidents across CMS, VA, DoD, IRS, and DHS programs, ensuring compliance with NIST SPs and DFARS.