ISSO: RMF & ATO Security Lead for DHS Systems

CACI International, Inc.; United States; On-site; USD 90,000 - 190,000; Full time

Job summary

CACI International, Inc. is seeking an Information System Security Officer to support DHS Headquarters. The ISSO will lead RMF activities for ATO decisions, develop SSPs, and ensure compliance with FISMA, NIST, and DHS directives.

You will collaborate with system owners, perform risk assessments, and maintain security documentation and inventories while guiding security controls across programs. The role emphasizes continuous monitoring and incident response planning to safeguard

Qualifications

• U.S. Citizenship required.
• DHS suitability or current DHS eligibility preferred.
• Bachelor's degree with 8 years of information security experience.
• 7 years of information security experience.
• Experience with RMF, NIST, FISMA, IT security.
• Experience developing SSPs, POA&M, and CM Plans.
• Knowledge of NIST SP 800-37/800-53 and DHS 4300 Series.

Responsibilities

• Execute RMF activities for ATO decisions, including system categorization, control implementation and continuous monitoring.
• Develop and maintain System Security Plans, baselines, inventories, and related documentation.
• Create and maintain Configuration Management Plans and perform security impact analyses.
• Develop and test Contingency and Incident Response Plans for business continuity.
• Advise system owners and executives on cybersecurity matters and remediation plans.
• Maintain hardware/software inventories and perform FISMA scorecard analyses.

Skills

RMF knowledge

NIST standards

Security audits

POA&M development

SSP development

Education

Bachelor degree

Tools

RegScale

eMASS

CSAM

Job description

CACI International, Inc. is seeking an Information System Security Officer to support DHS Headquarters. The ISSO will lead RMF activities for ATO decisions, develop SSPs, and ensure compliance with FISMA, NIST, and DHS directives.

You will collaborate with system owners, perform risk assessments, and maintain security documentation and inventories while guiding security controls across programs. The role emphasizes continuous monitoring and incident response planning to safeguard