Senior ISSO - RMF & Compliance Specialist

CACI; Washington (District of Columbia); On-site; USD 104,000 - 218,000; Full time

Job summary

CACI is seeking an Intermediate Information System Security Officer to support FEMA OCISO in Washington, DC. The role focuses on RMF, NIST, and FISMA compliance across FEMA information systems, coordinating with Lead ISSOs and stakeholders to implement robust security controls.

The candidate will develop SSPs, POA&Ms, and Contingency Plans, conduct risk analyses, and manage continuous monitoring. A Secret clearance, 7+ years of info security experience, and IAT Level III credentials are required.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or current DHS or FEMA EOD preferred.
• Active Secret security clearance.
• BS/BA + 15 years of applicable experience or equivalent.
• Must have one of the following IAT Level III qualifications: CISSP, CISM, CASP+.
• Minimum 7 years of experience in information security.
• Demonstrated expertise in RMF, Information Security processes, FISMA, NIST SP 800-37, NIST.
• Experience developing security documentation including SSPs, POA&Ms, and Contingency Plans.
• Knowledge of DHS 4300 Series and federal cybersecurity requirements.
• Experience with continuous monitoring and vulnerability management.

Responsibilities

• Execute RMF activities for ATO decisions and ensure compliance of FEMA Information Systems.
• Implement security controls and conduct assessments to identify vulnerabilities and gaps.
• Develop and maintain System Security Plans, Configuration Management Plans, and Contingency Plans.
• Conduct Security Impact Analyses and test changes pre- and post-deployment.
• Support continuous monitoring and track POA&Ms for identified vulnerabilities.
• Prepare Security Test Plans and Security Test Reports within required timelines.
• Analyze Risk Assessment Reports and FISMA Scorecards; generate weekly/monthly program reports.
• Follow ISSO Guide for developing and updating security artifacts and tracking new technologies.

Skills

RMF

NIST SP 800-37

FISMA

SSP development

POA&M management

Contingency planning

Vulnerability management

Continuous monitoring

Education

BS/BA + 15 years experience

Tools

CSAM

RegScale

eMASS

GRC tools

Job description

CACI is seeking an Intermediate Information System Security Officer to support FEMA OCISO in Washington, DC. The role focuses on RMF, NIST, and FISMA compliance across FEMA information systems, coordinating with Lead ISSOs and stakeholders to implement robust security controls.

The candidate will develop SSPs, POA&Ms, and Contingency Plans, conduct risk analyses, and manage continuous monitoring. A Secret clearance, 7+ years of info security experience, and IAT Level III credentials are required.