Remote ISSO for Federal Systems & RMF

Commence; Boston (MA); Remote; USD 120,000 - 180,000; Full time

Job summary

Commence seeks an Information System Security Officer (ISSO) to lead security assessments, authorization, and continuous monitoring for federal programs. You will coordinate with the CIO, ISSM, and cross-functional teams to maintain ATOs across CMS, VA, DoD/DHA, IRS, and DHS/TSA.

This remote role requires up to 25% travel and demands expertise in NIST RMF, SSP creation, risk management, and incident response. U.S. citizenship and ability to obtain Public Trust are required.

Qualifications

• 5+ years in information assurance or cybersecurity; 3+ as ISSO/A&A lead for federal systems.
• Experience taking a federal system through initial ATO or reauthorization; SSP authorship & POA&M management.

Responsibilities

• Serve as designated ISSO for assigned federal systems and agency liaison.
• Lead risk assessment, ATO packaging, and RMF activities.
• Maintain POA&M in agency GRC platforms and track remediation timelines.

Skills

Information security

RMF/NIST SP 800-37

Security documentation

Incident response

Education

Bachelor's degree in a related field

Tools

Tenable/Nessus

Defender

AWS Inspector

SCAP/STIG Viewer

Job description

Commence seeks an Information System Security Officer (ISSO) to lead security assessments, authorization, and continuous monitoring for federal programs. You will coordinate with the CIO, ISSM, and cross-functional teams to maintain ATOs across CMS, VA, DoD/DHA, IRS, and DHS/TSA.

This remote role requires up to 25% travel and demands expertise in NIST RMF, SSP creation, risk management, and incident response. U.S. citizenship and ability to obtain Public Trust are required.