Information System Security Officer (ISSO)

About the role

CACI is seeking an Information System Security Officer (ISSO) to support the DHS Headquarters. The ISSO acts as the single point of contact for systems security, leads cybersecurity engineering for assigned Program Management Organizations with direct support to the Compliance Branch Lead, and safeguards DHS mission-critical systems and data. The position is full time, regular, remote (any state), with no travel required.

Key responsibilities

• Execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions, including system categorization, control selection and implementation, self-assessments, POA&M development and continuous monitoring
• Maintain System Security Plans (SSPs), including control baselines, inheritance, Business Impact Analyses, implementation statements, technical and system descriptions, and hardware and software inventories
• Create and maintain Configuration Management Plans, conduct Security Impact Analyses, approve Change Requests and document the security impact of configuration changes
• Develop and test Contingency Plans and Incident Response Plans, and conduct annual risk assessments, security assessments and vulnerability assessments
• Advise system owners and senior executives on cybersecurity matters and develop remediation work plans for assessment and audit findings
• Maintain Hardware and Software Inventory Lists, conduct FISMA Scorecard Analysis and ensure proper access controls are implemented
• Research and stay current on tools, techniques, countermeasures and trends in computer and network vulnerabilities, data hiding and encryption

Required profile

• U.S. citizenship required
• DHS EOD suitability or current DHS EOD preferred
• BS/BA plus 8 years of applicable information security experience (the text also lists 7+ years)
• Demonstrated expertise in RMF, information security processes, audits, tools, implementation, FISMA and NIST
• Experience developing SSPs, POA&Ms and Configuration Management Plans

Required skills

• Knowledge of NIST SP 800-37, NIST SP 800-53 and DHS 4300 Series requirements
• Desired: CISSP, CISM or CASP+ certification, previous DHS experience, GRC tools such as CSAM, RegScale or eMASS, cloud security and FedRAMP knowledge, and continuous monitoring experience

What we offer

• Proposed pay range of $90,300-$189,600, depending on location, contract category, experience and skills
• Healthcare, wellness, financial, retirement, family support, continuing education and time off benefits
• Flexible time off benefit and learning resources