Information System Security Manager

CACI; United States; On-site; USD 104,000 - 218,000; Full time

Benefits offered by this job

Flexible time off

Learning resources

Health benefits

Job summary

CACI is seeking an experienced Information Systems Security Manager (ISSM) to lead RMF lifecycle activities for a portfolio of classified DoD systems supporting SAP, SCI, and NSA missions. You will manage system authorizations, direct cybersecurity compliance, and serve as the senior cybersecurity authority for multiple high-visibility programs.

The role requires collaborating with AOs, SCAs, and government customers, preparing ATOs, maintaining RMF artifacts, and guiding ISSOs and engineers.

Qualifications

• Active TS clearance with willingness to sit for a polygraph.
• 8+ years cybersecurity experience supporting DoD classified systems (SCI, SAP).
• 3+ years as ISSM or senior cybersecurity lead.
• Deep knowledge of JSIG, RMF, DoDI 8510.01, NIST SP 800-53, ICD 503.

Responsibilities

• Lead RMF lifecycle activities from system categorization through ATO, IATT, and continuous authorization.
• Develop and manage SSPs, POA&Ms, Risk Assessments, Implementation Plans, and other RMF artifacts.
• Coordinate with SCAs, AOs, Cyber Leads, and program stakeholders to resolve findings and adjudicate risk.
• Prepare systems for ATO, IATT, reauthorization, and continuous monitoring.
• Ensure compliant implementation of security controls per JSIG, NIST SP 800-53, DoDI 8510.01, ICD 503, and SAP/NSA requirements.
• Track, remediate, and validate POA&Ms to ensure timely closure of vulnerabilities.
• Conduct internal cybersecurity compliance assessments and inspection-ready reviews.
• Support DCSA, SAP, NSA, and customer cybersecurity inspections.
• Evaluate system architecture changes for compliance and cybersecurity impact.
• Provide cybersecurity guidance and oversight to ISSOs, admins, engineers, and program staff.
• Develop and present cybersecurity briefings and risk recommendations to leadership and government customers.
• Maintain strong working relationships with AOs, SCAs, FSOs, SAP Security, program management, and system owners.
• Support cybersecurity incident response, vulnerability management, continuous monitoring, and reporting.
• Ensure all authorization and cybersecurity documentation remains current and inspection-ready.
• Manage cybersecurity across a multi-system classified portfolio.

Skills

Active TS clearance

Polygraph-willing

RMF/JSIG expertise

DoD classified systems

ISSM experience

Risk management

Communication skills

Education

Bachelor's degree in Cybersecurity/related field

Tools

eMASS/Xacta

SIEM tools

Nessus/ACAS

Job description

Job Title: Information System Security ManagerJob Category: SecurityTime Type: Full timeMinimum Clearance Required to Start: TS/SCI with PolygraphEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Continental US* * *

The Opportunity

CACI is seeking an experienced Information Systems Security Manager (ISSM) to lead and oversee Risk Management Framework (RMF) lifecycle activities for a portfolio of classified DoD systems supporting SAP, SCI, and NSA missions. You will manage system authorizations, direct cybersecurity compliance, and serve as the senior cybersecurity authority for multiple high-visibility programs—ensuring systems remain secure, compliant, and fully authorized to operate.

Responsibilities

• Lead RMF lifecycle activities from system categorization through Authorization to Operate (ATO), Interim Authorization to Test (IATT), and continuous authorization.
• Develop and manage SSPs, POA&Ms, Risk Assessments, Implementation Plans, and other RMF artifacts.
• Coordinate with SCAs, AOs, Cyber Leads, and program stakeholders to resolve findings and adjudicate risk.
• Prepare systems for ATO, IATT, reauthorization, and continuous monitoring.
• Ensure compliant implementation of security controls per JSIG, NIST SP 800-53, DoDI 8510.01, ICD 503, and SAP/NSA requirements.
• Track, remediate, and validate POA&Ms to ensure timely closure of vulnerabilities.
• Conduct internal cybersecurity compliance assessments and inspection-ready reviews.
• Support DCSA, SAP, NSA, and customer cybersecurity inspections.
• Evaluate system architecture changes for compliance and cybersecurity impact.
• Provide cybersecurity guidance and oversight to ISSOs, admins, engineers, and program staff.
• Develop and present cybersecurity briefings and risk recommendations to leadership and government customers.
• Maintain strong working relationships with AOs, SCAs, FSOs, SAP Security, program management, and system owners.
• Support cybersecurity incident response, vulnerability management, continuous monitoring, and reporting.
• Ensure all authorization and cybersecurity documentation remains current and inspection-ready.
• Manage cybersecurity across a multi-system classified portfolio.

Qualifications

• Must have an active TS and willing to sit for the POLY
• 8+ years of cybersecurity experience supporting DoD classified systems (SCI, SAP).
• 3+ years as an ISSM or senior cybersecurity lead.
• Deep knowledge of JSIG, RMF, DoDI 8510.01, NIST SP 800-53, ICD 503.
• Experience coordinating directly with AOs, AO reps, SCAs, and government cyber stakeholders.
• Demonstrated ability to manage cybersecurity across multi-system classified environments.
• Strong technical risk assessment and communication skills.
• Ability to operate independently in complex classified environments.
• DoD 8140 IAM Level II/III or IAT III certification; CISSP preferred.

Experience with cybersecurity and RMF toolsets, including

• eMASS and/or Xacta for RMF, authorization, and security control management.
• SIEM platforms for security monitoring, event analysis, and incident response.
• Vulnerability management tools, including Nessus/ACAS or equivalent platforms.
• Tools used for STIG compliance, configuration management, continuous monitoring, and POA&Ms tracking.
• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or related field; or equivalent experience.
• Current or recent SAP access

Must maintain eligibility for all required program-specific accesses.

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

The proposed salary range for this position is:

$103,800 - $218,100

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Equal Opportunity Employer

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.