ISSO/MARS-E Lead
Remote
Job Summary
Maintain and improve the Marketplace's security and privacy compliance posture through the MARS-E document suite and evidence repositories, ensuring artifacts remain audit-ready and current. Lead or materially support RMF execution activities, including categorization, control selection, implementation oversight, assessment readiness, and authorization package hygiene, consistent with NIST RMF's structured lifecycle. Coordinate across multiple ADO ISSOs and system teams to standardize control implementations and evidence quality, functioning as a portfolio-level compliance integrator. Drive risk decisions, waiver/deviation processes, and consistent application of CMS ARS requirements while managing risk/exception processes and audit readiness. This role aligns to CMS governance where "System Security and Privacy Officer" functions are explicitly required to implement safeguards under IS2P2.
Required Qualifications
- Experience owning security compliance posture and MARS-E suite lifecycle
- Authority to interpret and standardize security controls
- Experience overseeing ATO artifacts and evidence quality
- Experience coordinating with ISPG and ADO ISSOs
- Experience managing risk/exception processes
- Experience leading audit readiness
- Knowledge of CMS governance functions for System Security and Privacy Officer (ISSO)
- Experience implementing safeguards under IS2P2
- Experience coordinating across multiple ADO ISSOs and system teams
- Experience functioning as a portfolio-level compliance integrator
- Experience driving risk decisions and waiver/deviation processes
- Experience applying CMS ARS requirements
- Experience leading or materially supporting RMF execution activities
- Experience with NIST RMF structured lifecycle
- Experience with NIST SP 800-53 control catalog
- Experience with NIST SP 800-53A assessment procedure
- Experience validating control effectiveness and readiness for audits/authorizations
- Experience ensuring systems align with CMS ARS minimum controls
- Experience with ATO and POA&M management
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.