Lead Senior ISSO – RMF & ATO Leader

CACI International Inc; Washington (District of Columbia); On-site; USD 90,300 - 189,600; Full time

Job summary

CACI International Inc is seeking a Lead Senior Information System Security Officer (Senior ISSO) in Washington, DC to support FEMA OCISO. You will lead RMF activities, manage a team, and drive ATO decisions for mission-critical systems in a dynamic federal environment.

You will develop and maintain SSPs, perform risk assessments, and guide system owners on cybersecurity matters, ensuring compliance with DHS, NIST, and FISMA requirements while advancing FEMA's security posture.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or current DHS/FEMA EOD preferred.
• BS/BA + 15 years of applicable information security experience.
• Must have one of the following IAT Level III qualifications: CISSP, CISM, or CASP+.
• 10+ years of information security experience.
• Demonstrated expertise in RMF and information security.

Responsibilities

• Lead RMF activities for Authority to Operate (ATO) decisions, including system categorization, control selection and implementation, self-assessments, POA&M development, and continuous monitoring.
• Manage and mentor a team of ISSOs (13 personnel) and oversee SSPs, baselines, inheritance, BIA, and inventories.
• Develop and test Contingency Plans, Incident Response Plans, and remediation for audit findings; ensure documentation is up to date.
• Produce Security Test Plans/reports, Risk Assessment Reports, and program-wide reports to track progress and compliance.

Skills

RMF

Information security

Education

BS/BA in information security

Job description

CACI International Inc is seeking a Lead Senior Information System Security Officer (Senior ISSO) in Washington, DC to support FEMA OCISO. You will lead RMF activities, manage a team, and drive ATO decisions for mission-critical systems in a dynamic federal environment.

You will develop and maintain SSPs, perform risk assessments, and guide system owners on cybersecurity matters, ensuring compliance with DHS, NIST, and FISMA requirements while advancing FEMA's security posture.