Information System Security Manager

CACI International; Florham Park (NJ); On-site; USD 104,000 - 218,000; Full time

Job summary

CACI International is seeking an experienced Information Systems Security Manager to lead RMF lifecycle activities for DoD systems supporting SAP, SCI, and NSA missions.

You will manage system authorizations, drive cybersecurity compliance, and serve as the senior cybersecurity authority across high-visibility programs to keep systems secure, authorized, and inspection-ready.

Qualifications

• TS/SCI with Poly clearance required.
• 8+ years of cybersecurity experience supporting DoD classified systems (SCI, SAP).
• 3+ years as an ISSM or senior cybersecurity lead.
• Deep knowledge of JSIG, RMF, DoDI 8510.01, NIST SP 800-53, ICD 503.
• Experience coordinating with AOs, AO reps, SCAs, and government cyber stakeholders.
• Demonstrated ability to manage cybersecurity across multi-system classified environments.
• Strong technical risk assessment and communication skills.
• DoD 8140 IAM Level II/III or IAT III certification; CISSP preferred.

Responsibilities

• Lead RMF lifecycle activities from system categorization through Authorization to Operate (ATO), Interim Authorization to Test (IATT), and continuous authorization.
• Develop and manage SSPs, POA&Ms, Risk Assessments, Implementation Plans, and other RMF artifacts.
• Coordinate with SCAs, AOs, Cyber Leads, and program stakeholders to resolve findings and adjudicate risk.
• Prepare systems for ATO, IATT, reauthorization, and continuous monitoring.
• Ensure compliant implementation of security controls per JSIG, NIST SP 800-53, DoDI 8510.01, ICD 503, and SAP/NSA requirements.
• Track, remediate, and validate POA&Ms to ensure timely closure of vulnerabilities.
• Conduct internal cybersecurity compliance assessments and inspection-ready reviews.
• Support DCSA, SAP, NSA, and customer cybersecurity inspections.
• Evaluate system architecture changes for compliance and cybersecurity impact.
• Provide cybersecurity guidance and oversight to ISSOs, admins, engineers, and program staff.
• Develop and present cybersecurity briefings and risk recommendations to leadership and government customers.
• Maintain strong working relationships with AOs, SCAs, FSOs, SAP Security, program management, and system owners.
• Support cybersecurity incident response, vulnerability management, continuous monitoring, and reporting.
• Ensure all authorization and cybersecurity documentation remains current and inspection-ready.
• Manage cybersecurity across a multi-system classified portfolio.

Skills

RMF lifecycle

Risk management

System security

Cybersecurity leadership

AO coordination

POA&M tracking

Vulnerability management

Incident response

Inspections

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

eMASS/Xacta

SIEM

Vulnerability scanners

STIG tooling

Job description

Job Title: Information System Security Manager

Job Category: Security

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:

CACI is seeking an experienced Information Systems Security Manager (ISSM) to lead and oversee Risk Management Framework (RMF) lifecycle activities for a portfolio of classified DoD systems supporting SAP, SCI, and NSA missions. You will manage system authorizations, direct cybersecurity compliance, and serve as the senior cybersecurity authority for multiple high-visibility programs—ensuring systems remain secure, compliant, and fully authorized to operate.

Responsibilities:

• Lead RMF lifecycle activities from system categorization through Authorization to Operate (ATO), Interim Authorization to Test (IATT), and continuous authorization.
• Develop and manage SSPs, POA&Ms, Risk Assessments, Implementation Plans, and other RMF artifacts.
• Coordinate with SCAs, AOs, Cyber Leads, and program stakeholders to resolve findings and adjudicate risk.
• Prepare systems for ATO, IATT, reauthorization, and continuous monitoring.
• Ensure compliant implementation of security controls per JSIG, NIST SP 800-53, DoDI 8510.01, ICD 503, and SAP/NSA requirements.
• Track, remediate, and validate POA&Ms to ensure timely closure of vulnerabilities.
• Conduct internal cybersecurity compliance assessments and inspection-ready reviews.
• Support DCSA, SAP, NSA, and customer cybersecurity inspections.
• Evaluate system architecture changes for compliance and cybersecurity impact.
• Provide cybersecurity guidance and oversight to ISSOs, admins, engineers, and program staff.
• Develop and present cybersecurity briefings and risk recommendations to leadership and government customers.
• Maintain strong working relationships with AOs, SCAs, FSOs, SAP Security, program management, and system owners.
• Support cybersecurity incident response, vulnerability management, continuous monitoring, and reporting.
• Ensure all authorization and cybersecurity documentation remains current and inspection-ready.
• Manage cybersecurity across a multi-system classified portfolio.

Qualifications:

Required:

• TS/SCI with Poly Clearance
• 8+ years of cybersecurity experience supporting DoD classified systems (SCI, SAP).
• 3+ years as an ISSM or senior cybersecurity lead.
• Deep knowledge of JSIG, RMF, DoDI 8510.01, NIST SP 800-53, ICD 503.
• Experience coordinating directly with AOs, AO reps, SCAs, and government cyber stakeholders.
• Demonstrated ability to manage cybersecurity across multi-system classified environments.
• Strong technical risk assessment and communication skills.
• Ability to operate independently in complex classified environments.
• DoD 8140 IAM Level II/III or IAT III certification; CISSP preferred.

Experience with cybersecurity and RMF toolsets, including:

• eMASS and/or Xacta for RMF, authorization, and security control management.
• SIEM platforms for security monitoring, event analysis, and incident response.
• Vulnerability management tools, including Nessus/ACAS or equivalent platforms.
• Tools used for STIG compliance, configuration management, continuous monitoring, and POA&M tracking.
• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or related field; or equivalent experience.
• Current or recent SAP access
• Must maintain eligibility for all required program-specific accesses.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$103,800 - $218,100

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.