Remote ISSO for Federal Systems & NIST RMF Expert

Commence; Mississippi; Remote; USD 110.000 - 170.000; Vollzeit

Zusammenfassung

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments and authorization for federal programs. You will align system security with RMF, maintain SSPs, and coordinate with agency security teams while managing incident response and continuous monitoring.

The role requires 5+ years in information assurance, with at least 3 years in ISSO/A&A, and relevant certifications. Remote work is allowed with travel as needed.

Qualifikationen

• 5+ years information assurance or cybersecurity experience, including 3+ years as ISSO/A&A lead for federal systems

Aufgaben

• Serve as ISSO for assigned federal systems and liaison to agency ISSOs and officials
• Coordinate security milestones, assess changes, and maintain project timeline visibility
• Manage Security Assessment and Authorization lifecycle per NIST RMF (SP 800-37)
• Prepare and maintain SSP, risk assessment, Privacy Impact Assessment, and security plans
• Lead CMS/VA/DoD/IRS assessments and evidence collection with Compliance Analysts
• Ensure agency-specific compliance (CMS ARS/IS2P2, VA 6500, NIST SP 800-171/CMMC, IRS 1075/4812)
• Produce incident response plans and monitor continuous monitoring; manage POA&M
• Handle contract security deliverables and personnel security tasks
• Support internal audits and controls testing across SOC 2, HIPAA, HITRUST, ISO 27001

Kenntnisse

ISSO designation

Agency liaison

RMF / NIST SP 800-37

Vulnerability remediation

Security incident response

Ausbildung

Bachelor’s degree in a related field

Tools

Tenable Nessus

AWS

Microsoft 365 / Azure

Jobbeschreibung

Commence is seeking an Information System Security Officer (ISSO) to lead security assessments and authorization for federal programs. You will align system security with RMF, maintain SSPs, and coordinate with agency security teams while managing incident response and continuous monitoring.

The role requires 5+ years in information assurance, with at least 3 years in ISSO/A&A, and relevant certifications. Remote work is allowed with travel as needed.