> Markdown version of [/jobs/ext/4702109-information-system-security-officer-isso-rmf-analyst](https://www.wearedevelopers.com/jobs/ext/4702109-information-system-security-officer-isso-rmf-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer (ISSO) / RMF Analyst

- **Company:** Caci Inc
- **Location:** Scott Air Force Base, IL, United States
- **Salary:** $75,200 - $158,100
- **Contract:** Contract
- **Skills:** Cloud Computing Security, Cyber Security, Information Systems, Information Security Management, Information Systems Security Architecture Professional, Software Engineering, Information Technology, Plan of Action and Milestones
- **Published:** November 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e20a8be9e663c499

## About the Role

Required:

 * An active Secret or Top Secret security clearance.
 * Meets DoD 8140 Interim Education Requirements.
 * 3-5 years of experience supporting RMF, ATO, or cybersecurity compliance activities within Department of Defense or federal environments.
 * Hands-on experience using eMASS.
 * Working knowledge of: NIST SP 800-53 Rev. 5 DoD Risk Management Framework (RMF) Continuous Monitoring processes
 * Demonstrated experience independently developing System Security Plans (SSPs).
 * Proven ability to manage POA&Ms through remediation and closure.
 * Strong analytical, organizational, and problem-solving skills.
 * Ability to communicate effectively with technical and non-technical stakeholders.
 * DoD 8140.03M DCWF Basic Tier Certification:
 + Certified Ethical Hacker (CEH)
 * Risk Management Framework (RMF).
 * Authorization to Operate (ATO) Processes., * Experience using eMASSer or other RMF automation and compliance management tools.
 * Experience supporting cloud-hosted, hybrid, or complex enterprise authorization boundaries.
 * Familiarity with the DoD RMF Knowledge Service and related cybersecurity guidance.
 * Experience supporting large-scale DoD or federal cybersecurity programs.
 * Understanding of supply chain risk management principles and practices.
 * Experience collaborating across engineering, operations, architecture, and compliance teams.
 * eMASSer Automation.
 * Cloud Security and Hybrid Environments.
 * Supply Chain Risk Management.
 * DoD RMF Knowledge Service.
 * Enterprise Cybersecurity Programs.
 * Cybersecurity Architecture Collaboration.
 * Security Assessment Report (SAR) Coordination.
 * Advanced GRC Practices.
 * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Software Engineering, Data Science, or a related field.
 * One or more of the following DoD 8140.03M DCWF Intermediate Tier certifications:
 + CEH Practical (CEH-P)
 + RCCE Level 1
 + Cloud+
 + CPTE
 + FITSP-A

## Description

Join CACI and play a critical role in safeguarding mission-essential Department of Defense systems. As an Information System Security Officer (ISSO) / RMF Analyst , you will manage the security authorization posture of assigned information systems, ensuring compliance with DoD cybersecurity requirements while supporting operational readiness and mission success.

In this role, you'll work alongside a highly skilled team of cybersecurity architects, engineers, and operations professionals, gaining hands-on experience with modern Risk Management Framework (RMF) tools and processes. You'll directly contribute to Authorization to Operate (ATO) efforts, continuous monitoring activities, and cybersecurity governance initiatives while building a clear path toward more senior Governance, Risk, and Compliance (GRC) leadership opportunities.

Responsibilities:

 * Develop, maintain, and update System Security Plans (SSPs) for assigned systems.
 * Manage Plans of Action and Milestones (POA&Ms) from identification through remediation and closure.
 * Prepare, coordinate, and submit Authorization to Operate (ATO) packages in support of system authorization efforts.
 * Execute continuous monitoring activities in accordance with established RMF strategies and security requirements.
 * Utilize eMASS to manage cybersecurity compliance activities, authorization artifacts, and RMF workflows.
 * Partner with Information System Security Engineers (ISSEs), cybersecurity operations teams, and system stakeholders to validate security control implementation and effectiveness.
 * Develop Security Assessment Plans (SAPs) and support Security Assessment Report (SAR) coordination activities.
 * Assist with supply chain risk management planning and documentation.
 * Support cybersecurity governance initiatives and RMF strategic planning efforts. Track authorization status, compliance metrics, and remediation activities to ensure systems maintain an appropriate security posture.
*, * System Security Plans (SSPs).

 * POA&M Management.
 * Continuous Monitoring.
 * NIST SP 800-53 Rev. 5.
 * DoD Cybersecurity Compliance.
 * Security Assessment Planning.
 * Governance, Risk, and Compliance (GRC).
 * Documentation and Audit Readiness.
 * Risk Analysis and Remediation Tracking.