Information System Security Officer (ISSO)

CACI; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

CACI is seeking an Intermediate Information System Security Officer to support FEMA's OCISO in Washington, DC. The ISSO will collaborate with Lead ISSOs and IT stakeholders to implement and maintain robust security controls and ensure a strong security posture across FEMA information systems.

You will perform Risk Management Framework activities for ATO decisions, maintain system documentation, support continuous monitoring, and ensure confidentiality, integrity and availability in line with

Qualifications

• Experience applying RMF to government systems.
• Understanding of FISMA, DHS directives and NIST guidance.
• Ability to implement and test security controls.

Responsibilities

• Execute RMF activities for ATO decisions and ensure compliance.
• Implement security controls and assess systems to identify vulnerabilities.
• Develop and maintain SSPs, CM Plans, and Contingency Plans.
• Conduct Security Impact Analyses and test changes pre/post deployment.

Skills

Risk Management Framework

FISMA compliance

NIST standards

Security control implementation

Job description

Job Title: Information System Security Officer (ISSO)Job Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *

The Opportunity:

CACI is searching for an Intermediate Information System Security Officer to support the FEMA Office of the Chief Information Security Officer (OCISO) in Washington, D.C. As an Intermediate ISSO, you will play a crucial role in ensuring the security and compliance of FEMA's information systems. You will work in a dynamic environment, collaborating with Lead ISSOs, IT system owners, stakeholders, and cybersecurity professionals to implement and maintain robust security controls. Your efforts will directly contribute to safeguarding FEMA's mission-critical systems and data. The Intermediate ISSO will be responsible for technical cybersecurity efforts in coordination with Lead ISSOs, providing direct support to the Compliance Branch Lead. Serving as a point of contact for technical cybersecurity matters related to quantifying technical risk, the Intermediate ISSO will execute Risk Management Framework activities for ATO decisions, ensure confidentiality, integrity, and availability of FEMA Information Systems, and implement security controls throughout the system lifecycle. This position requires maintaining a security posture in compliance with FISMA, DHS 4300 Series, NIST, and DHS and Component Directives.

Responsibilities:

The Intermediate ISSO will execute Risk Management Framework activities for ATO decisions and ensure systems meet compliance requirements while ensuring confidentiality, integrity and availability of FEMA Information Systems through proper security control implementation. This position requires implementing security controls and conducting system assessments to identify vulnerabilities and gaps, as well as developing and maintaining System Security Plans, Configuration Management Plans, and Contingency Plans. The Intermediate ISSO will conduct Security Impact Analyses and test configuration changes pre- and post-deployment, support continuous monitoring of IT systems, and develop and track POA&Ms for identified vulnerabilities. Responsibilities include developing security requirement traceability matrices and managing hardware and software inventory lists, supporting cloud security initiatives, and participating in Change Advisory Board (CAB) reviews.