Information Systems Security Officer (ISSO)

CACI•Aberdeen Proving Ground, MD

12d•Onsite

About The Position

CACI is seeking a cleared Information Systems Security Officer (ISSO) to support Army C5ISR Mission Assurance. This senior-level position provides Cyber Security oversight, guidance, and support in accordance with the requirements set forth by the program office. The role involves conducting final reviews of submitted RMF packages from various centers attached to our organization. Upon review and concurrence, these centers will receive an Authorization to Operate (ATO). The ISSO will also provide recommendations to the centers to assist in their efforts in obtaining an ATO and support and coordinate workflow, activity, and documentation necessary to achieve successful RMF ATO for various DOD environments.

Requirements

An active DoD Secret clearance with the ability to be read on for a TS or TSSCI.
3 years of ARMY RMF experience (SSP and A&A process approvals).
Familiar with NIST PUBs & TTPs.
Ability to identify, interpret, and evaluate major applications, infrastructure, enclaves, and Enterprise system environments based on proposed accreditation boundaries.
Ability to manage multiple projects simultaneously.
Strong verbal and written communications and interpersonal skills.
Security+ Required.

Nice To Haves

CISSP Desired.
Ability to work in a team-focused, dynamic environment.
Must be flexible, independent, and self-motivated.
Must be punctual with regular and consistent attendance.

Responsibilities

Provide senior-level RMF support in a leadership capacity.
Validate packages being submitted for authorizations (ATOs) in the eMASS package approval chain.
Verify submissions have met the threshold for approval, including: CCIs SCA-V results, POA&Ms, STIGs, Cyber Security Strategies and System Security Plans (SSPs), Other RMF documentation.
Identify, develop (either directly or in coordination with applicable experts), and incorporate common artifacts found in an RMF authorization package, such as system architecture and boundaries, hardware and software inventories, risk assessment reports, POA&Ms, data flows, PPSM accounting, and other necessary system, network, and application documentation.
Knowledge and experience identifying, assessing, and documenting compliance against applicable DoD IA security controls (technical, management, operational), Service (e.g., Army) regulations, etc., within the RMF package.
Familiarity with the use of vulnerability scanning and assessment tools (e.g., ACAS/Nessus) necessary to identify and document compliance.