ISSO: RMF Security Lead for Critical Systems

CACI International Inc.; Washington (District of Columbia); On-site; USD 104,000 - 218,000; Full time

Job summary

CAC I International Inc. in Washington, DC seeks an Intermediate Information System Security Officer to support FEMA OCISO. You will implement and maintain security controls across FEMA information systems, coordinating with Lead ISSOs and system owners.

The role focuses on RMF/ATO activities, development of SSPs, CMPs, and POA&Ms, performing risk analyses, and ensuring continuity of operations while complying with NIST, FISMA, and DHS directives.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or DHS/FEMA EOD preferred.
• Active Secret security clearance.
• BS/BA + 10 years of applicable experience or equivalent combination.
• One of the following IAT Level III: CISSP, CISM, or CASP+.
• Minimum 7 years of experience in information security.
• Experience with RMF, FISMA, and NIST SP 800-37.
• Experience developing SSPs, POA&Ms, and Contingency Plans.
• Knowledge of DHS 4300 Series and federal cybersecurity requirements.
• Experience with continuous monitoring and vulnerability management.

Responsibilities

• Execute RMF activities for ATO decisions and ensure systems meet compliance requirements.
• Implement security controls and conduct system assessments to identify vulnerabilities.
• Develop and maintain SSPs, Configuration Management Plans, and Contingency Plans.
• Conduct Security Impact Analyses and test changes pre- and post-deployment.
• Support continuous monitoring of IT systems and track POA&Ms.
• Develop security requirement traceability matrices and manage inventories.
• Support cloud security initiatives and participate in CAB reviews.
• Prepare Security Test Plans and Security Test Reports per schedule.
• Produce Security Impact Analysis Reports within 5 business days after change notification.

Skills

RMF

NIST SP 800-37

FISMA

Continuous monitoring

Vulnerability management

Technical writing

Communication

Education

Bachelor's degree (BS/BA)

Tools

CSAM

RegScale

eMASS

Job description

CAC I International Inc. in Washington, DC seeks an Intermediate Information System Security Officer to support FEMA OCISO. You will implement and maintain security controls across FEMA information systems, coordinating with Lead ISSOs and system owners.

The role focuses on RMF/ATO activities, development of SSPs, CMPs, and POA&Ms, performing risk analyses, and ensuring continuity of operations while complying with NIST, FISMA, and DHS directives.