Information System Security Officer – Federal Programs

🔥 13 hours ago

🌵 Arizona, Colorado, +24 more states – Remote

🌵 Arizona – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote 🦬 Montana – Remote 🌾 Nebraska – Remote 🎰 Nevada – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🏈 Ohio – Remote 🌪️ Oklahoma – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote 🎸 Mississippi – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote 🌴 South Carolina – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote ☕ Washington – Remote ⛰️ West Virginia – Remote 🧀 Wisconsin – Remote

💵 $100k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Commence

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🏥 Healthcare

🏛️ Government

🤖 Artificial Intelligence

Healthcare • Government • Artificial Intelligence

Commence is a healthcare data and technology company that delivers data-centered solutions to make health data more accessible, discoverable, and interoperable. The company pairs clinical expertise with AI-driven data transformation and a technology platform to address fraud, waste & abuse, independent dispute resolution, peer and independent reviews, quality improvement, and patient advocacy. Commence serves federal health agencies (CMS, VA, Defense Health Agency), state & local government programs, and commercial health customers, focusing on improving outcomes, accuracy, and program integrity.

📋 Description

• Serve as designated ISSO for assigned federal systems and primary system-level security liaison • Carry out CIO and ISSM priorities and escalate program-level issues, risk acceptances, and exceptions • Coordinate with Project Managers to incorporate security and authorization milestones into project plans • Assess security impacts of system changes before release • Run the NIST Risk Management Framework Security Assessment and Authorization lifecycle from FIPS 199 categorization through authorization, ongoing authorization, and reauthorization • Author and maintain SSPs, risk assessments, Privacy Impact Assessments, contingency plans, incident response plans, configuration management plans, and interconnection agreements • Maintain POA&Ms in agency GRC platforms • Review vulnerability and configuration scans against DISA STIGs, CIS benchmarks, and agency baselines • Assign and track remediation with Cybersecurity Engineers and IT Operations • Prepare ongoing-authorization and continuous-monitoring reports • Lead preparation for CMS, VA, DoD, and IRS agency assessments • Coordinate evidence collection and findings responses with Compliance Analysts • Maintain compliance with agency-specific federal security, privacy, and CUI requirements • Respond to security and privacy incidents affecting federal data and coordinate agency notifications • Complete system-level contract security deliverables • Manage federal personnel security tasks, including Public Trust, e-QIP processing, training, rules of behavior, and access attestations • Support internal audits and control assessments against SOC 2, NIST, HIPAA, HITRUST, and ISO/IEC 27001 frameworks • Provide system-specific input for external audits and security questionnaires

🎯 Requirements

• 5+ years of information assurance or cybersecurity experience • 3+ years as an ISSO or A&A lead for federal information systems • Bachelor’s degree in a related field or equivalent experience • Personally taken at least one federal system through an initial ATO or reauthorization under NIST SP 800-37/800-53 • SSP authorship and POA&M management in agency-specific GRC platforms • Working knowledge of at least two: CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A • Experience with FedRAMP and HIPAA is a plus • Comfortable reading vulnerability and configuration scan output from Tenable/Nessus, Defender, AWS Inspector, or SCAP/STIG Viewer • Familiarity with AWS and Microsoft 365/Azure • Clear, precise writing ability and capacity to manage multiple systems and deadlines • CompTIA Security+ or higher DoD 8140-qualifying certification required • CISSP, CGRC, CISA, or CCSP preferred • U.S. citizenship required • Ability to obtain and maintain federal Public Trust suitability required • Ability to sit, read, work on a computer, and watch a computer screen for extended periods • Ability to occasionally stand, walk, use hands and fingers, kneel, or crouch

🏖️ Benefits

• Remote work arrangement • Estimated 15–25% travel • Reasonable accommodations for individuals with disabilities • On-call coverage participation for security incidents • Equal employment opportunity and nondiscrimination • Remote candidates accepted in specified states