Senior RMF & Information Security Lead

CACI; Washington (District of Columbia); On-site; USD 121,000 - 266,000; Full time

Job summary

CACI seeks a Senior Information System Security Officer to support FEMA OCISO in Washington, DC. You will lead RMF activities for ATO, develop SSPs, and coordinate security controls across programs.

The role requires active clearance, DHS/FEMA EOD preference, and deep expertise in NIST and DHS directives. You will craft security documentation, oversee risk assessments, and guide audit remediation while communicating with senior leadership.

Qualifications

• U.S. citizenship is required.
• Active Secret security clearance is required.
• FEMA EOD suitability or DHS/FEMA EOD preferred.
• BS/BA plus 15 years of information security experience.
• Must hold one IAT Level III cert: CISSP, CISM, or CASP+.
• 10+ years of information security experience.
• Expertise in RMF, NIST, IT security, and audits.
• Experience developing SSPs, POA&Ms, and CM Plans.
• Knowledge of NIST SP 800-37/800-53 and DHS 4300 Series requirements.

Responsibilities

• Execute RMF activities for ATO decisions including system categorization and control implementation.
• Develop and maintain System Security Plans (SSPs) and inventories.
• Create and maintain Configuration Management Plans; approve Change Requests.
• Develop Contingency and Incident Response Plans; ensure business continuity.
• Conduct risk assessments, annual security assessments, and vulnerability assessments.
• Produce Security Test Plans/reports and Risk Assessment Reports; generate weekly/monthly program reports.
• Advise system owners and executives on cybersecurity matters and remediation plans.

Skills

RMF

Audits

Information security

Security standards

Education

BS/BA in Information Security or related field

Tools

CSAM

RegScale

eMASS

Job description

CACI seeks a Senior Information System Security Officer to support FEMA OCISO in Washington, DC. You will lead RMF activities for ATO, develop SSPs, and coordinate security controls across programs.

The role requires active clearance, DHS/FEMA EOD preference, and deep expertise in NIST and DHS directives. You will craft security documentation, oversee risk assessments, and guide audit remediation while communicating with senior leadership.