Remote ISSO for Federal Systems & Compliance

Commence; Maryland; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will collaborate with the CIO, ISSM, and cross-functional teams to maintain authorization status across CMS, VA, DoD/DHA, IRS, and DHS.

The role requires 5+ years in information assurance, with at least 3+ years as an ISSO or A&A lead, and a bachelor’s degree or equivalent experience. Remote work with some travel is supported.

Qualificações

• 5+ years of information assurance or cybersecurity experience, including 3+ years as an ISSO or A&A lead for federal information systems; bachelor’s degree in a related field or equivalent experience.
• Has personally taken at least one federal system through an initial ATO or reauthorization under NIST SP, including SSP authorship and POA&M management in various agency specific GRC platforms.
• Working knowledge of at least two of: CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A. Experience with FedRAMP and HIPAA a plus.
• Comfortable reading vulnerability and configuration scan output (Tenable/Nessus, Defender, AWS Inspector, SCAP/STIG Viewer) and translating findings into remediation tasks.
• Familiarity with AWS and Microsoft 365/Azure.
• A clear, precise writer who can run several systems and deadline clocks at once.
• CompTIA Security+ (or higher DoD 8140-qualifying certification) required. CISSP, CGRC, CISA, or CCSP preferred.
• U.S. citizenship and ability to obtain and maintain federal Public Trust suitability required.

Responsabilidades

• ISSO designation and liaison with agency ISSOs, Authorizing Officials, assessors, and prime contractor security teams; escalate issues to the ISSM and CIO.
• Coordinate security milestones into project plans and assess security impact of changes before shipment.
• Run the Security Assessment and Authorization lifecycle under RMF from categorization to reauthorization and maintain SSP, risk assessment, and contingency plans.
• Maintain POA&M in agency GRC platforms; review vulnerability scans and coordinate remediation with Cybersecurity Engineers and IT Operations.
• Lead system-level preparations for CMS, VA, DoD assessments and IRS Safeguards reviews; assist with evidence collection and findings response.
• Maintain compliance with CMS ARS/IS2P2, VA 6500, DFARS, NIST SP 800-171/CMMC, IRS publications, DHS 4300A, HIPAA, and related frameworks.
• Act as first responder for security incidents and coordinate notifications with Privacy Officer and prime contractors.
• Complete system-level contract security deliverables and manage federal personnel security tasks.
• Support internal audits and control assessments against SOC 2, NIST CSF/800-53/800-171, HIPAA, HITRUST, and ISO 27001.
• This description is not all-inclusive and may be modified to meet business needs.

Conhecimentos

ISSO experience

Federal systems

Security governance

Clear communicator

Formação académica

Bachelor’s degree in a related field

Equivalent experience

Ferramentas

NIST RMF

SCAP/STIG Viewer

Tenable Nessus

AWS

Microsoft 365/Azure

Descrição da oferta de emprego

Commence is seeking an Information System Security Officer (ISSO) to lead security assessment, authorization, and continuous monitoring for federal systems. You will collaborate with the CIO, ISSM, and cross-functional teams to maintain authorization status across CMS, VA, DoD/DHA, IRS, and DHS.

The role requires 5+ years in information assurance, with at least 3+ years as an ISSO or A&A lead, and a bachelor’s degree or equivalent experience. Remote work with some travel is supported.