CACI
Direct Workday career site

Security Control Assessor/IA Specialist

Location
Alexandria, VA · On-site
Job type
Full-time
Level
Senior
Experience
5+ years
Education
Bachelor's degree
Listed
18 days ago

Skills & highlights for this role

  • NIST SP 800-53 Rev 5
  • Risk Management Framework (RMF) Rev 5
  • Security control assessment and validation
  • Information assurance principles
  • ATO processes
  • Cloud security assessment (AWS, Azure, or similar)
  • Vulnerability identification and remediation validation
  • Security Assessment Report preparation
  • Analytical problem solving
  • Written and verbal communication

Also useful

  • Leading small technical teams or workgroups
  • Project management methodologies
  • Cross-functional technical collaboration
  • External stakeholder engagement

About the role

Job Title: Security Control Assessor/IA Specialist Job Category: Security Time Type: Full time Minimum Clearance Required to Start: Secret Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local * * * The Opportunity: Responsible for providing information assurance for digital information, ensuring its confidentiality, integrity, and availability.

Responsibilities include the granting of authorization to operate IT systems at acceptable levels of risk, monitoring and testing of IT systems for vulnerabilities and indicia of compromise, incident response and remediation, the development of appropriate policy, relevant user security awareness and training, and compliance with applicable government and other external standards.

Responsibilities

* Provide information assurance for digital systems, ensuring adherence to security and compliance standards. * Develop and maintain assessment procedures and methodologies aligned with NIST guidelines and other relevant frameworks. * Plan and execute security control assessments as an independent assessor using the Risk Management Framework for various information systems within the organization. * Validate security control implementation and provide test results. * Provide tailored documentation to support customer security authorization processes. * Identify vulnerabilities, weaknesses, and potential risks in information systems and infrastructure. * Prepare detailed Security Assessment Reports (SARs) documenting findings and recommendations. * Support development and maintenance of information security policies, procedures, and standards. * Support compliance with government regulations and external cybersecurity frameworks. * Provide SME review and recommendations for system designs, technical solutions, and operational procedures across functional teams. * Work independently with limited supervision, managing projects or technical processes as assigned. * Coach and review the work of junior team members to support professional development. * Communicate effectively with internal stakeholders and external partners such as vendors or customers. * Stay current with evolving cybersecurity threats, technologies, and best practices. * Ensure compliance with security awareness training and alignment with organizational requirements.

Pay and benefits

Required: * Working knowledge of NIST SP 800 53 Rev 5 security controls, including control evaluation, validation, and alignment to federal cybersecurity requirements. * Hands on experience applying the Risk Management Framework (RMF) Rev 5, including control selection, assessment, documentation, and continuous monitoring. * Foundational experience supporting security assessments in cloud environments (AWS, Azure, or similar), including understanding shared responsibility models and reviewing cloud control implementations. * Ability to identify security control weaknesses, validate remediation actions, and interpret vulnerability findings within both on prem and cloud systems. * Strong understanding of information assurance principles, ATO processes, and compliance frameworks. * Minimum of 5 years of relevant professional experience. * Bachelor's degree in a related field or equivalent work experience. * Demonstrated analytical ability and experience solving complex technical problems. * Excellent communication and collaboration skills, with the ability to influence technical decisions and work independently with minimal supervision.

Desired: * Experience leading small technical teams or workgroups. * Practical knowledge of project management methodologies. * Ability to collaborate across multiple technical specialties to develop integrated solutions. * Experience engaging with external stakeholders regarding operational policies and technical procedures. - What You Can Expect: A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day.

You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.

We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Read the original posting

From CACI's careers page, first listed on Rolev.ai on October 23, 2026. Rolev.ai is not the employer.

How Rolev.ai helps with this application

Rolev.ai is a job search and application tool for US job seekers. For this Security Control Assessor/IA Specialist role at CACI, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.

  • See how you fit

    Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.

  • Tailor without inventing

    Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.

  • Draft the full kit

    Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.

  • 1-Click Extension Autofill

    The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.

Common questions

Where is the Security Control Assessor/IA Specialist job at CACI located?

This Security Control Assessor/IA Specialist position at CACI is located in Alexandria, VA (On-site). Always check CACI's application page for specific state eligibility or relocation policies.

What qualifications are required for Security Control Assessor/IA Specialist at CACI?

For the Security Control Assessor/IA Specialist role, CACI highlights 5+ years of relevant experience; a bachelor's degree; experience with NIST SP 800-53 Rev 5, Risk Management Framework (RMF) Rev 5, Security control assessment and validation, Information assurance principles, ATO processes, Cloud security assessment (AWS, Azure, or similar). Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.

How do I apply for the Security Control Assessor/IA Specialist position at CACI?

This listing links directly to CACI's Workday application page. You can apply directly on CACI's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Workday application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.