Senior Information System Security Officer (RMF)

CACI International Inc.; Washington (District of Columbia); On-site; USD 104,000 - 218,000; Full time

Job summary

CACI International Inc. is seeking an Intermediate Information System Security Officer to support FEMA OCISO in Washington, DC. The ISSO ensures security controls, helps prepare SSPs and contingency plans, and coordinates risk management for ATO decisions.

Qualifications include citizenship, active Secret clearance, 7+ years in information security, and certifications (CISSP/CISM/CASP+). The role emphasizes RMF, NIST, FISMA compliance and cloud security within FEMA systems.

Qualifications

• U.S. Citizenship is required.
• FEMA EOD suitability or current DHS/FEMA EOD preferred.
• Active Secret security clearance.
• Minimum 7 years of information security experience.
• Experience developing security documentation (SSPs, POA&Ms, Contingency Plans).
• Experience with RMF, NIST SP 800-37, FISMA and related directives.

Responsibilities

• Execute RMF activities for ATO decisions and ensure confidentiality, integrity, and availability.
• Develop and maintain SSPs, Contingency Plans, and Configuration Management Plans.
• Support continuous monitoring, vulnerability management, and CAB reviews.
• Prepare Security Test Plans and Reports; generate POA&Ms for identified issues.

Skills

RMF expertise

FISMA/NIST

Security documentation

Vulnerability management

Cloud security

Security testing planning

Education

CISSP certification

CISM certification

CASP+ certification

Bachelor's degree + 15 years experience

Tools

AWS

Azure

RegScale

eMASS

CSAM

Job description

CACI International Inc. is seeking an Intermediate Information System Security Officer to support FEMA OCISO in Washington, DC. The ISSO ensures security controls, helps prepare SSPs and contingency plans, and coordinates risk management for ATO decisions.

Qualifications include citizenship, active Secret clearance, 7+ years in information security, and certifications (CISSP/CISM/CASP+). The role emphasizes RMF, NIST, FISMA compliance and cloud security within FEMA systems.