RMF & NIST Security Controls Assessor

VetJobs; Alexandria (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

CACI International Inc in Alexandria, VA is seeking a Security Control Assessor / IA Specialist to provide information assurance for federal-style systems on-site.

The role requires applying RMF Rev 5 and NIST SP 800-53 Rev 5 controls, evaluating security implementations, and preparing SARs. Candidates should have 5+ years of experience, a related degree, and strong communication to work with internal teams and partners.

Qualifications

• Working knowledge of NIST SP 800-53 Rev 5 security controls and evaluation.
• Hands-on RMF Rev 5 experience including assessment and continuous monitoring.
• Experience supporting security assessments in cloud environments (AWS/Azure).
• Ability to identify security control weaknesses, validate remediation actions, and interpret findings.

Responsibilities

• Provide information assurance for digital systems per security standards.
• Develop and maintain assessment procedures aligned with RMF/NIST.
• Plan and execute security control assessments as an independent assessor.
• Validate security control implementations and report results.
• Prepare SARs documenting findings and recommendations.
• Support development of security policies and standards.
• Collaborate with internal stakeholders and external partners.
• Stay current with cybersecurity threats and best practices.
• Coach junior team members and review their work.
• Ensure compliance with government regulations.

Skills

NIST SP 800-53 Rev 5 controls

RMF Rev 5

Cloud security

Vulnerability assessment

Information assurance concepts

Communication

Independent work

Education

Bachelor’s degree or equivalent

High School/GED

Job description

CACI International Inc in Alexandria, VA is seeking a Security Control Assessor / IA Specialist to provide information assurance for federal-style systems on-site.

The role requires applying RMF Rev 5 and NIST SP 800-53 Rev 5 controls, evaluating security implementations, and preparing SARs. Candidates should have 5+ years of experience, a related degree, and strong communication to work with internal teams and partners.