Remote ISSO for Federal Systems & Compliance Lead

Commence; Columbus (OH); Remote; USD 120,000 - 180,000; Full time

Job summary

Commence seeks an experienced Information System Security Officer (ISSO) to lead security assessments, authorization, and continuous monitoring for federal programs. You will own ATO packages, risk assessments, and incident response coordination, collaborating with CIO, engineers, and project teams.

You should have 5+ years in information assurance, 3+ years as an ISSO/A&A lead, and strong knowledge of NIST RMF, CMS ARS/IS2P2, and related standards. This is a remote position with travel.

Qualifications

• 5+ years in information assurance or cybersecurity, incl. 3+ years as ISSO/A&A lead for federal systems.
• Experience taking at least one federal system through initial ATO/reauthorization (SSP, POA&M).
• Knowledge of CMS ARS/IS2P2, VA 6500, DoD RMF, NIST SP 800-171/CMMC; IRS Publication 1075/4812; DHS 4300A; HIPAA, and other regulations.

Responsibilities

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs and Officials.
• Coordinate security milestones with project managers and assess security impact of changes.
• Prepare and maintain ATO packages, SSPs, risk assessments, and contingency/plans.
• Maintain POA&M, track vulnerability scans, and coordinate remediation with engineers and IT ops.
• Lead CMS/VA/DoD/IRS assessments and ensure evidence collection for findings.

Skills

Information security

Risk management

NIST RMF

Security compliance

Communication

Writing skills

Education

Bachelor's degree in a related field

Tools

Tenable/Nessus

Defender

AWS

Azure/Microsoft 365

Job description

Commence seeks an experienced Information System Security Officer (ISSO) to lead security assessments, authorization, and continuous monitoring for federal programs. You will own ATO packages, risk assessments, and incident response coordination, collaborating with CIO, engineers, and project teams.

You should have 5+ years in information assurance, 3+ years as an ISSO/A&A lead, and strong knowledge of NIST RMF, CMS ARS/IS2P2, and related standards. This is a remote position with travel.