Security Controls Lead & IA Specialist (RMF/NIST)

CACI International Inc; Alexandria (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

CACI International Inc is seeking a Security Control Assessor/IA Specialist to provide information assurance for federal IT systems. You will plan and execute RMF-based assessments, validate controls, and produce SARs with actionable recommendations.

Key efforts include aligning with NIST SP 800-53 Rev 5, working in cloud and on‑prem environments, mentoring juniors, and engaging stakeholders to ensure ongoing compliance and effective security posture.

Qualifications

• Bachelor’s degree in a related field or equivalent work experience.
• 5+ years of relevant professional information assurance experience.
• Hands-on RMF and NIST SP 800-53 Rev 5 knowledge and application.
• Experience assessing security controls in cloud and on‑prem environments.

Responsibilities

• Provide information assurance for digital systems, ensuring security controls meet standards.
• Develop assessment procedures aligned with NIST guidelines and RMF.
• Plan and execute security control assessments as an independent assessor.
• Validate control implementation and deliver SARs with findings and recommendations.
• Support information security policy development and regulatory compliance.
• Identify vulnerabilities and risks in information systems and infrastructure.
• Communicate with stakeholders and coach junior staff as needed.
• Stay current with evolving cybersecurity threats and best practices.

Skills

RMF Rev 5

NIST SP 800-53 Rev 5

Cloud security (AWS/Azure)

Vulnerability assessment

Communication skills

Education

Bachelor's degree in related field

Tools

AWS

Azure

Job description

CACI International Inc is seeking a Security Control Assessor/IA Specialist to provide information assurance for federal IT systems. You will plan and execute RMF-based assessments, validate controls, and produce SARs with actionable recommendations.

Key efforts include aligning with NIST SP 800-53 Rev 5, working in cloud and on‑prem environments, mentoring juniors, and engaging stakeholders to ensure ongoing compliance and effective security posture.