C

CACI

Provides government contracting technology and services

Information System Security Officer

Security Governance, Risk & CompliancePosted on Nov 10
Full-timeFlorham Park, NJ, USA$86.6k - $181.8k

About the Job

Requirements

  • Have 3–5 years of cybersecurity experience supporting DoD classified systems involving SCI or SAP.
  • Know JSIG, the Risk Management Framework (RMF), DoDI 8510.01, NIST SP 800-53, and ICD 503.
  • Have experience coordinating directly with Authorizing Officials (AOs), AO representatives, Security Control Assessors (SCAs), and government cybersecurity stakeholders.
  • Demonstrate the ability to manage cybersecurity across multi-system classified environments.
  • Have technical risk-assessment and communication skills.
  • Be able to operate independently in complex classified environments.
  • Hold a DoD 8140 IAM Level II/III or IAT III certification; CISSP is preferred.
  • Have experience with cybersecurity and RMF toolsets, including eMASS and/or Xacta for RMF, authorization, and security-control management; SIEM platforms for security monitoring, event analysis, and incident response; vulnerability-management tools such as Nessus/ACAS or equivalent; and tools used for STIG compliance, configuration management, continuous monitoring, and POA&M tracking.
  • Have a bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or a related field, or equivalent experience.
  • Have current or recent SAP access.
  • Maintain eligibility for all required program-specific accesses.
  • Have an active TS clearance and be willing to sit for the polygraph.

Responsibilities

  • Support RMF lifecycle activities from system categorization through Authorization to Operate (ATO), Interim Authorization to Test (IATT), and continuous authorization.
  • Develop and manage System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), risk assessments, implementation plans, and other RMF artifacts.
  • Coordinate with SCAs, AOs, Cyber Leads, and program stakeholders to resolve findings and adjudicate risk.
  • Prepare systems for ATO, IATT, reauthorization, and continuous monitoring.
  • Ensure security controls are implemented compliantly according to JSIG, NIST SP 800-53, DoDI 8510.01, ICD 503, and SAP/NSA requirements.
  • Track, remediate, and validate POA&Ms to ensure timely closure of vulnerabilities.
  • Conduct internal cybersecurity compliance assessments and inspection-ready reviews.
  • Support DCSA, SAP, NSA, and customer cybersecurity inspections.
  • Evaluate system architecture changes for compliance and cybersecurity impact.
  • Provide cybersecurity guidance and oversight to ISSOs, administrators, engineers, and program staff.
  • Develop and present cybersecurity briefings and risk recommendations to leadership and government customers.
  • Maintain working relationships with AOs, SCAs, FSOs, SAP Security, program management, and system owners.
  • Support cybersecurity incident response, vulnerability management, continuous monitoring, and reporting.
  • Ensure authorization and cybersecurity documentation remains current and inspection-ready.
  • Manage cybersecurity across a multi-system classified portfolio.

Desired Qualifications

  • CISSP certification.

About the Company

CACI

Provides government contracting technology and services

CACI International Inc. provides technology and professional services to U.S. government clients, focusing on national security and modernization. It earns most of its revenue through long-term government contracts that fund engineering, intelligence, logistics, cybersecurity, data analytics, and IT solutions for defense, intelligence, and federal civilian agencies. Its products and services work by delivering specialized technical expertise, secure systems, and mission-support capabilities that help agencies run operations more efficiently and securely. CACI differentiates itself through its deep domain knowledge in national security, a proven track record of delivering high-quality, reliable solutions, and a skilled workforce that can execute complex, long-duration contracts. The company’s goal is to be a trusted partner for government modernization needs by providing advanced technology solutions and mission support that enhance national security and operational effectiveness.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1962

Recently Posted Jobs

Explore more opportunities at CACI

See more jobs