Junior Information Security Officer - RMF & Compliance

CACI; Washington (District of Columbia); On-site; USD 73,000 - 149,000; Full time

Job summary

CACI is seeking a Junior Information System Security Officer to support FEMA OCISO in Washington, D.C. You will work with Lead ISSOs, IT system owners, and cybersecurity professionals to implement and maintain robust security controls across FEMA information systems.

Responsibilities include RMF activities for ATO decisions, developing and maintaining SSPs, POA&Ms, and Contingency Plans, conducting security assessments, monitoring systems, and producing weekly and monthly program reports.

Qualifications

• U.S. Citizenship required
• FEMA EOD suitability or DHS/FEMA EOD preferred
• BS/BA + 5 years of applicable experience or equivalent
• Knowledge of RMF, FISMA, NIST SP 800-37/800-53
• Experience developing SSPs, POA&Ms, and Contingency Plans
• Knowledge of DHS 4300 Series and federal cybersecurity requirements
• Experience with continuous monitoring and vulnerability management

Responsibilities

• Execute RMF activities for ATO decisions and ensure confidentiality, integrity, and availability of FEMA information systems
• Develop and maintain System Security Plans (SSP), Configuration Management Plans, and Contingency Plans
• Conduct Security Impact Analyses and test configuration changes pre- and post-deployment
• Support continuous monitoring and develop POA&Ms for identified vulnerabilities
• Create and maintain security requirement traceability matrices and manage asset inventories
• Support cloud security initiatives and CAB reviews
• Produce audit support documentation and respond to cybersecurity data calls with leadership
• Generate and track POA&Ms within 0 to 15 days after vulnerability identification
• Update SSPs, CM Plans, and Contingency Plans annually or when changes occur
• Prepare Security Impact Analysis Reports within 5 business days after change notification
• Analyze Risk Assessment Reports and FISMA Scorecards; produce Weekly Activity and Monthly Program Reports

Skills

RMF Knowledge

FISMA Knowledge

NIST SP 800-37

NIST SP 800-53

Security Documentation

Vulnerability Management

Technical Writing

Education

BS/BA + 5 years experience

Tools

CSAM

RegScale

eMASS

Job description

CACI is seeking a Junior Information System Security Officer to support FEMA OCISO in Washington, D.C. You will work with Lead ISSOs, IT system owners, and cybersecurity professionals to implement and maintain robust security controls across FEMA information systems.

Responsibilities include RMF activities for ATO decisions, developing and maintaining SSPs, POA&Ms, and Contingency Plans, conducting security assessments, monitoring systems, and producing weekly and monthly program reports.