Security Control Assessor & RMF Specialist

CACI International Inc; Alexandria (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

CACI International Inc is seeking a Security Control Assessor / IA Specialist in the United States. The role focuses on information assurance, RMF-based security control assessments, and adherence to NIST and federal cybersecurity requirements. Travel is up to 10% locally.

The candidate will develop assessment procedures, validate control implementations, and prepare detailed SARs while supporting security policies and government regulatory compliance.

Qualifications

• Familiarity with NIST SP 800-53 Rev 5 security controls and their evaluation.
• Experience applying RMF Rev 5, including control selection, assessment, and continuous monitoring.
• Experience supporting security assessments in cloud environments (AWS/Azure) and reviewing cloud control implementations.
• Ability to identify weaknesses, validate remediation, and interpret findings in on-prem and cloud systems.
• Strong knowledge of information assurance, ATO processes, and compliance frameworks.
• Minimum 5 years of relevant experience.
• Bachelor’s degree in a related field or equivalent work experience.
• Excellent written and verbal communication; ability to influence technical decisions.

Responsibilities

• Provide information assurance for digital systems aligning with security standards.
• Develop and maintain assessment procedures aligned with NIST guidelines.
• Plan and execute security control assessments as an RMF-based independent assessor.
• Validate control implementation and provide test results.
• Prepare SARs documenting findings and recommendations.
• Support development of security policies, procedures, and standards.
• Ensure compliance with government regulations and frameworks.
• Provide SME review for designs and operational procedures.
• Work independently and mentor junior team members.
• Communicate effectively with stakeholders and vendors.
• Stay current with cybersecurity threats and best practices.
• Support security awareness training and organizational requirements.

Skills

NIST SP 800 53 Rev 5

RMF Rev 5

Cloud security (AWS/Azure)

Vulnerability remediation

ATO processes

Analytical problem solving

Communication skills

Independent work

Education

Bachelor's degree or equivalent

Job description

CACI International Inc is seeking a Security Control Assessor / IA Specialist in the United States. The role focuses on information assurance, RMF-based security control assessments, and adherence to NIST and federal cybersecurity requirements. Travel is up to 10% locally.

The candidate will develop assessment procedures, validate control implementations, and prepare detailed SARs while supporting security policies and government regulatory compliance.