Information Systems Security Officer (ISSO)

Summary

CACI International Inc is seeking an Information Systems Security Officer to support its cybersecurity and information assurance mission. The role owns the security authorization posture of assigned DoD information systems, develops and manages RMF and ATO documentation, conducts continuous monitoring, and coordinates with engineering, operations, architecture, ISSE, and SecOps teams.

Responsibilities

• Develop, update, and maintain System Security Plans (SSPs) for assigned systems
• Manage POA&Ms from identification through remediation and closure
• Compile and submit complete Authorization to Operate (ATO) packages
• Conduct continuous monitoring aligned with program strategy and RMF standards
• Use eMASS to track RMF workflows, manage artifacts, and support GRC governance processes
• Coordinate with ISSEs and SecOps teams to validate security control implementations
• Create Security Assessment Plans (SAPs) and support SAR development and coordination
• Draft supply chain risk management plans to support system-level authorization needs
• Partner with the Cybersecurity Architect on RMF strategic planning and lifecycle improvements

Skills

• Active **Secret or TS** clearance
• 3–5 years of RMF/ATO experience in DoD or federal environments
• Hands-on experience with **eMASS**
• Working knowledge of **NIST SP 800‑53 Rev. 5** and DoD RMF processes
• Demonstrated ability to independently author **SSPs** and manage **POA&Ms**
• DoD 8140.03M DCWF Basic Tier — CEH
• DoD 8140 Interim Education Options
• **Required to travel to Scott Airforce base on a quarterly basis**
• DoD 8140.03M DCWF Intermediate Tier — CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP‑A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
• Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, IT, or Software Engineering
• Experience with **eMASSer** or other RMF automation tooling
• Exposure to cloud-hosted or hybrid system authorization boundaries
• Familiarity with the **DoD RMF Knowledge Service**

Qualifications

Must Haves

• Active **Secret or TS** clearance
• 3–5 years of RMF/ATO experience in DoD or federal environments
• Hands-on experience with **eMASS**
• Working knowledge of **NIST SP 800‑53 Rev. 5** and DoD RMF processes
• Demonstrated ability to independently author **SSPs** and manage **POA&Ms**
• DoD 8140.03M DCWF Basic Tier — CEH
• DoD 8140 Interim Education Options
• **Required to travel to Scott Airforce base on a quarterly basis**

Nice to Haves

• DoD 8140.03M DCWF Intermediate Tier — CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP‑A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
• Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, IT, or Software Engineering
• Experience with **eMASSer** or other RMF automation tooling
• Exposure to cloud-hosted or hybrid system authorization boundaries
• Familiarity with the **DoD RMF Knowledge Service**

Benefits

• A unique flexible time off benefit
• Access to robust learning resources
• Healthcare benefits
• Wellness benefits
• Financial benefits
• Retirement benefits
• Family support benefits
• Continuing education benefits
• Time off benefits