Information Systems Security Officer (ISSO)

CACI International Inc is seeking an Information Systems Security Officer to support the security authorization of Department of Defense information systems. The role manages RMF activities, including SSPs, POA&Ms, ATO packages, continuous monitoring, security assessments, and coordination with engineering and cybersecurity teams.

Responsibilities:

• Develop, update, and maintain System Security Plans (SSPs) for assigned systems
• Manage POA&Ms from identification through remediation and closure
• Compile and submit complete Authorization to Operate (ATO) packages
• Conduct continuous monitoring aligned with program strategy and RMF standards
• Use eMASS to track RMF workflows, manage artifacts, and support GRC governance processes
• Coordinate with ISSEs and SecOps teams to validate security control implementations
• Create Security Assessment Plans (SAPs) and support SAR development and coordination
• Draft supply chain risk management plans to support system-level authorization needs
• Partner with the Cybersecurity Architect on RMF strategic planning and lifecycle improvements

Requirements:

• Active Secret or TS clearance
• 3–5 years of RMF/ATO experience in DoD or federal environments
• Hands-on experience with eMASS
• Working knowledge of NIST SP 800‑53 Rev. 5 and DoD RMF processes
• Demonstrated ability to independently author SSPs and manage POA&Ms
• DoD 8140.03M DCWF Basic Tier — CEH
• DoD 8140 Interim Education Options
• Required to travel to Scott Airforce base on a quarterly basis
• DoD 8140.03M DCWF Intermediate Tier — CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP‑A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
• Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, IT, or Software Engineering
• Experience with eMASSer or other RMF automation tooling
• Exposure to cloud-hosted or hybrid system authorization boundaries
• Familiarity with the DoD RMF Knowledge Service