Information System Security Officer (ISSO) / RMF Analyst

The Opportunity:
Join CACI and play a critical role in safeguarding mission-essential Department of Defense systems. As an Information System Security Officer (ISSO) / RMF Analyst, you will manage the security authorization posture of assigned information systems, ensuring compliance with DoD cybersecurity requirements while supporting operational readiness and mission success.

In this role, you'll work alongside a highly skilled team of cybersecurity architects, engineers, and operations professionals, gaining hands-on experience with modern Risk Management Framework (RMF) tools and processes. You'll directly contribute to Authorization to Operate (ATO) efforts, continuous monitoring activities, and cybersecurity governance initiatives while building a clear path toward more senior Governance, Risk, and Compliance (GRC) leadership opportunities.
Responsibilities:

• Develop, maintain, and update System Security Plans (SSPs) for assigned systems.
• Manage Plans of Action and Milestones (POA&Ms) from identification through remediation and closure.
• Prepare, coordinate, and submit Authorization to Operate (ATO) packages in support of system authorization efforts.
• Execute continuous monitoring activities in accordance with established RMF strategies and security requirements.
• Utilize eMASS to manage cybersecurity compliance activities, authorization artifacts, and RMF workflows.
• Partner with Information System Security Engineers (ISSEs), cybersecurity operations teams, and system stakeholders to validate security control implementation and effectiveness.
• Develop Security Assessment Plans (SAPs) and support Security Assessment Report (SAR) coordination activities.
• Assist with supply chain risk management planning and documentation.
• Support cybersecurity governance initiatives and RMF strategic planning efforts.
• Track authorization status, compliance metrics, and remediation activities to ensure systems maintain an appropriate security posture.
  

Qualifications:
Required: 

• An active Secret or Top Secret security clearance.
• Meets DoD 8140 Interim Education Requirements.
• 3-5 years of experience supporting RMF, ATO, or cybersecurity compliance activities within Department of Defense or federal environments.
• Hands-on experience using eMASS.
• Working knowledge of: NIST SP 800-53 Rev. 5 DoD Risk Management Framework (RMF) Continuous Monitoring processes
• Demonstrated experience independently developing System Security Plans (SSPs).
• Proven ability to manage POA&Ms through remediation and closure.
• Strong analytical, organizational, and problem-solving skills.
• Ability to communicate effectively with technical and non-technical stakeholders.
• DoD 8140.03M DCWF Basic Tier Certification:
  • Certified Ethical Hacker (CEH)
• Risk Management Framework (RMF).
• Authorization to Operate (ATO) Processes.
• eMASS.
• System Security Plans (SSPs).
• POA&M Management.
• Continuous Monitoring.
• NIST SP 800-53 Rev. 5.
• DoD Cybersecurity Compliance.
• Security Assessment Planning.
• Governance, Risk, and Compliance (GRC).
• Documentation and Audit Readiness.
• Risk Analysis and Remediation Tracking.

Desired:

• Experience using eMASSer or other RMF automation and compliance management tools.
• Experience supporting cloud-hosted, hybrid, or complex enterprise authorization boundaries.
• Familiarity with the DoD RMF Knowledge Service and related cybersecurity guidance.
• Experience supporting large-scale DoD or federal cybersecurity programs.
• Understanding of supply chain risk management principles and practices.
• Experience collaborating across engineering, operations, architecture, and compliance teams.
• eMASSer Automation.
• Cloud Security and Hybrid Environments.
• Supply Chain Risk Management.
• DoD RMF Knowledge Service.
• Enterprise Cybersecurity Programs.
• Cybersecurity Architecture Collaboration.
• Security Assessment Report (SAR) Coordination.
• Advanced GRC Practices.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Software Engineering, Data Science, or a related field.
• One or more of the following DoD 8140.03M DCWF Intermediate Tier certifications:
  • CEH Practical (CEH-P)
  • RCCE Level 1
  • Cloud+
  • CPTE
  • FITSP-A
  • GCED
  • GCIH
  • GCSA
  • GICSP
  • GSEC
  • PenTest+
  • Security+
     

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.