Junior ISSO: RMF & Compliance Focus

CACI International Inc; Washington (District of Columbia); On-site; USD 73,000 - 149,000; Full time

Job summary

CACI is seeking a Junior Information System Security Officer to support FEMA's Office of the Chief Information Security Officer in Washington, DC. You will aid in implementing and maintaining security controls, perform RMF activities, and help safeguard FEMA information systems.

You will work with Lead ISSOs, IT system owners, and cybersecurity professionals to develop SSPs, POA&Ms, and contingency plans, conduct security assessments, and support continuous monitoring.

Qualifications

• FEMA/EOD suitability or DHS/FEMA EOD preferred.
• BS/BA + 5 years of applicable experience or equivalent.
• Knowledge of RMF, Information Security processes, FISMA, NIST SP 800-37/53.
• Experience developing security documentation including SSPs, POA&Ms, and Contingency Plans.
• Knowledge of DHS 4300 Series and federal cybersecurity requirements.
• Experience with continuous monitoring and vulnerability management.

Responsibilities

• Execute RMF activities for ATO decisions and ensure compliance.
• Implement security controls and conduct system assessments to identify vulnerabilities.
• Develop and maintain SSPs, POA&Ms, Contingency Plans, etc.
• Conduct Security Impact Analyses and test changes pre-/post-deployment.
• Support continuous monitoring and track remediation for identified vulnerabilities.
• Prepare security requirement traceability matrices and manage inventory lists.
• Participate in cloud security initiatives and CAB reviews.
• Produce weekly and monthly security reports.

Skills

RMF knowledge

NIST SP 800-37/53

Security documentation

Vulnerability management

Education

Bachelor's degree

Tools

CSAM

RegScale

eMASS

Job description

CACI is seeking a Junior Information System Security Officer to support FEMA's Office of the Chief Information Security Officer in Washington, DC. You will aid in implementing and maintaining security controls, perform RMF activities, and help safeguard FEMA information systems.

You will work with Lead ISSOs, IT system owners, and cybersecurity professionals to develop SSPs, POA&Ms, and contingency plans, conduct security assessments, and support continuous monitoring.