Information Security Officer – RMF & Compliance Expert

CACI International; Washington; On-site; USD 104,000 - 218,000; Full time

Job summary

CACI International invites an Intermediate Information System Security Officer to support FEMA's OCISO in Washington, D.C. You will implement and maintain robust security controls, perform RMF activities for ATO decisions, and collaborate with Lead ISSOs, IT owners, and cybersecurity professionals to safeguard FEMA information systems and data.

The role requires strong experience in RMF, NIST, FISMA, and DHS 4300 Series, with a focus on continuous monitoring, vulnerability management, and

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or Current DHS or FEMA EOD preferred.
• Active Secret security clearance
• BS/BA + 15 years of applicable experience or equivalent combination
• Must have one of the following Information Assurance Technician (IAT) Level III qualifications: CISSP, CISM, CASP+
• Minimum 7 years of experience in information security
• Demonstrated expertise in RMF, Information Security processes, FISMA, NIST SP 800-37, NIST
• Experience developing security documentation including SSPs, POA&Ms, and Contingency Plans
• Knowledge of DHS 4300 Series and federal cybersecurity requirements
• Experience with continuous monitoring and vulnerability management

Responsibilities

• Execute Risk Management Framework activities for ATO decisions.
• Ensure systems meet compliance requirements while maintaining confidentiality, integrity, and availability.
• Implement security controls and conduct system assessments to identify vulnerabilities.
• Develop and maintain SSPs, Configuration Management Plans, and Contingency Plans.
• Conduct Security Impact Analyses and test configuration changes pre- and post deployment.
• Support continuous monitoring of IT systems and track POA&Ms.
• Prepare Security Test Plans 90 days before testing and Security Test Reports within 15 days after testing.
• Produce weekly and monthly program reports.

Skills

RMF expertise

NIST knowledge

FISMA awareness

Security documentation

Effective communication

Education

BS/BA + 15 years experience

CISSP

CISM

CASP+

Tools

CSAM

RegScale

eMASS

Job description

CACI International invites an Intermediate Information System Security Officer to support FEMA's OCISO in Washington, D.C. You will implement and maintain robust security controls, perform RMF activities for ATO decisions, and collaborate with Lead ISSOs, IT owners, and cybersecurity professionals to safeguard FEMA information systems and data.

The role requires strong experience in RMF, NIST, FISMA, and DHS 4300 Series, with a focus on continuous monitoring, vulnerability management, and