RMF Cyber Security Controls Assessor

CACI International Inc; Washington (District of Columbia); On-site; USD 87,000 - 182,000; Full time

Job summary

CACI International Inc. is seeking a Cyber Security Control Assessor in Washington, D.C. to independently assess security controls for FEMA information systems, ensuring confidentiality, integrity, and availability.

You will evaluate control design, implementation, and effectiveness across systems, review SSPs and evidence, and contribute to authorization decisions under RMF and DHS standards.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or DHS/FEMA EOD preferred.
• BS/BA plus 6 years in RMF, control assessment, audit, or cybersecurity compliance.
• Knowledge of NIST SP 800-53, 800-37 RMF, and DHS 4300 Series.
• Experience with security control assessment methodologies and tools.
• Experience generating SAPs, RTMs, SARs.

Responsibilities

• Evaluate IT security controls and confirm compliance with NIST SP 800-53 and DHS RMF.
• Perform assessment procedures: interviews, examinations, and testing to verify control effectiveness.
• Analyze SSPs, policies, procedures, and artifacts for completeness and accuracy.
• Identify security gaps, assess residual risk, and prepare security assessment reports.
• Support authorization to operate and continuous monitoring activities.

Skills

U.S. Citizenship

RMF knowledge

Security assessment

NIST SP 800-53

Security testing

Education

BS/BA in related field

Tools

Tenable

Qualys

dbProtect

CSAM

STIG Viewer

RegScale/eMASS

Job description

CACI International Inc. is seeking a Cyber Security Control Assessor in Washington, D.C. to independently assess security controls for FEMA information systems, ensuring confidentiality, integrity, and availability.

You will evaluate control design, implementation, and effectiveness across systems, review SSPs and evidence, and contribute to authorization decisions under RMF and DHS standards.