Security Control Assessor/IA Specialist

CACI•Alexandria, VA

12d

About The Position

The Security Control Assessor/IA Specialist provides information assurance for digital information and systems, ensuring confidentiality, integrity, and availability. The role supports authorization to operate IT systems at acceptable risk levels through security control assessment, vulnerability monitoring and testing, incident response and remediation, policy development, user security awareness and training, and compliance with government and other external standards. The specialist plans and conducts independent security control assessments using the Risk Management Framework, validates control implementation, documents findings, and provides materials to support customer security authorization processes. The role also identifies system and infrastructure risks, advises teams on designs and technical solutions, supports security policies and compliance, and works with stakeholders and external partners. The position requires independent project or technical-process management and includes coaching and reviewing junior team members’ work.

Requirements

Working knowledge of NIST SP 800-53 Rev. 5 security controls, including control evaluation, validation, and alignment with federal cybersecurity requirements.
Hands-on experience applying RMF Rev. 5, including control selection, assessment, documentation, and continuous monitoring.
Foundational experience supporting security assessments in cloud environments such as AWS or Azure, including shared responsibility models and review of cloud control implementations.
Ability to identify security control weaknesses, validate remediation actions, and interpret vulnerability findings in on-premises and cloud systems.
Strong understanding of information assurance principles, ATO processes, and compliance frameworks.
At least 5 years of relevant professional experience.
Bachelor’s degree in a related field or equivalent work experience.
Demonstrated analytical ability and experience solving complex technical problems.
Excellent communication and collaboration skills, including the ability to influence technical decisions and work independently with minimal supervision.
Must be able to obtain and maintain a Secret clearance.

Nice To Haves

Experience leading small technical teams or workgroups.
Practical knowledge of project management methodologies.
Ability to collaborate across multiple technical specialties to develop integrated solutions.
Experience engaging with external stakeholders regarding operational policies and technical procedures.

Responsibilities

Provide information assurance for digital systems and ensure adherence to security and compliance standards.
Develop and maintain assessment procedures and methodologies aligned with NIST guidelines and other relevant frameworks.
Plan and execute independent security control assessments using the Risk Management Framework for organizational information systems.
Validate security control implementation and provide test results.
Prepare tailored documentation to support customer security authorization processes.
Identify vulnerabilities, weaknesses, and potential risks in information systems and infrastructure.
Prepare Security Assessment Reports (SARs) documenting findings and recommendations.
Support the development and maintenance of information security policies, procedures, and standards.
Support compliance with government regulations and external cybersecurity frameworks.
Review system designs, technical solutions, and operational procedures, and provide subject-matter-expert recommendations across functional teams.
Work independently with limited supervision and manage assigned projects or technical processes.
Coach and review junior team members’ work to support professional development.
Communicate with internal stakeholders and external partners, including vendors or customers.
Stay current with cybersecurity threats, technologies, and best practices.
Ensure compliance with security awareness training and alignment with organizational requirements.