Senior Information System Security Officer

Job Title: Senior Information System Security Officer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

* * *

The Opportunity:
CACI is searching for a Senior Information System Security Officer with Top Secret/SCI clearance to support the FEMA Office of the Chief Information Security Officer (OCISO) in Washington, D.C. As a Senior ISSO, you will play a crucial role in ensuring the security and compliance of FEMA's most sensitive and complex information systems. You will work in a dynamic environment requiring access to classified information up to TS/SCI levels, collaborating with IT system owners, stakeholders, and cybersecurity professionals to implement and maintain robust security controls. Your efforts will directly contribute to safeguarding FEMA's mission-critical systems and classified data. The Senior Lead ISSO requiring Top Secret/SCI clearance will serve as the single point of contact for the Cybersecurity Division on classified system matters, responsible for FEMA's most sensitive and complex systems. This position encompasses all responsibilities of the Senior ISSO (Secret) position, plus additional duties related to supporting both classified and unclassified systems throughout the System Development Life Cycle (SDLC). The Senior ISSO will work in government locations authorized for TS/SCI materials and information, participate in classified network and facility meetings related to Supply Chain Risk Management, and handle classified cybersecurity documentation in accordance with security regulations.


Responsibilities:
The Senior ISSO will complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions. The Senior ISSO will support both classified and unclassified systems throughout the System Development Life Cycle (SDLC) and work in government locations authorized for TS/SCI materials and information. This position requires participating in classified network and facility meetings related to Supply Chain Risk Management and handling classified cybersecurity documentation and communications in accordance with security regulations. The Senior ISSO will provide security authorization services for sensitive systems requiring TS/SCI access and ensure appropriate segregation and protection of information at all classification levels. Responsibilities include developing and maintaining System Security Plans (SSPs) for classified systems including control baselines, inheritance, Business Impact Analyses, and implementation statements. The position involves creating and maintaining Configuration Management Plans, Contingency Plans, and Incident Response Plans for classified environments, as well as conducting Risk Assessments, annual security assessments, and vulnerability assessments for both classified and unclassified systems. All deliverables must be appropriately marked, handled, stored, and transmitted according to classification level. The Senior ISSO will maintain network device and information security incident, damage, and threat assessment programs for classified systems and investigate network device and information security incidents to determine the extent of compromise to national security information and automated information systems.


Qualifications:

Required: 

- U.S. Citizenship required  

- Active TS/SCI Clearance

- BS/BA + 15 years of applicable experience in information security  

- Must have one of the following Information Assurance Technician (IAT) Level III qualifications:

  - Certified Information System Security Professional (CISSP)

  - Certified Information Security Manager (CISM)

  - CompTIA Advanced Security Practitioner (CASP+)

- 10+ years of experience in information security  

- Experience working with classified information systems and SCIFs

- Demonstrated expertise in RMF, FISMA, NIST, DHS 4300 Series, and classified system security requirements

- Complete Standard Form 4414 Non-Disclosure Agreement prior to accessing TS/SCI information .


Desired:

Previous DHS or DoD experience with classified systems

- Experience with Supply Chain Risk Management for classified networks

- Experience with CSAM, RegScale, eMASS, or similar GRC tools in classified environments

- Knowledge of Intelligence Community Directive (ICD) 503 and related requirements

- Experience supporting emergency operations or disaster response missions

- Strong communication skills for presenting to senior leadership on classified matters

-

What You Can Expect:

 A culture of int