Security Control Assessor / IA Specialist

Minimum clearance required: Secret | Full‑time, regular employee | Up to 10% local travel

Responsibilities

• Provide information assurance for digital systems, ensuring adherence to security and compliance standards.
• Develop and maintain assessment procedures and methodologies aligned with NIST guidelines and other relevant frameworks.
• Plan and execute security control assessments as an independent assessor using the Risk Management Framework for various information systems.
• Validate security control implementation and provide test results.
• Produce tailored documentation to support customer security authorization processes.
• Identify vulnerabilities, weaknesses, and potential risks in information systems and infrastructure.
• Prepare detailed Security Assessment Reports (SARs) documenting findings and recommendations.
• Support development and maintenance of information security policies, procedures, and standards.
• Support compliance with government regulations and external cybersecurity frameworks.
• Provide subject‑matter‑expert review and recommendations for system designs, technical solutions, and operational procedures across functional teams.
• Work independently with limited supervision, managing projects or technical processes as assigned.
• Coach and review the work of junior team members to support their professional development.
• Communicate effectively with internal stakeholders and external partners such as vendors or customers.
• Stay current with evolving cybersecurity threats, technologies, and best practices.
• Ensure compliance with security awareness training and alignment with organizational requirements.

Qualifications

• Working knowledge of NIST SP 800‑53 Rev 5 security controls, including control evaluation, validation, and alignment to federal cybersecurity requirements.
• Hands‑on experience applying the Risk Management Framework (RMF) Rev 5, including control selection, assessment, documentation, and continuous monitoring.
• Foundational experience supporting security assessments in cloud environments (AWS, Azure, or similar), with understanding of shared‑responsibility models and cloud control implementations.
• Ability to identify security control weaknesses, validate remediation actions, and interpret vulnerability findings in both on‑premises and cloud systems.
• Strong understanding of information assurance principles, ATO processes, and compliance frameworks.
• Minimum of 5 years of relevant professional experience.
• Bachelor’s degree in a related field or equivalent work experience.
• Demonstrated analytical ability and experience solving complex technical problems.
• Excellent communication and collaboration skills, with the ability to influence technical decisions and work independently with minimal supervision.
• Desired: Experience leading small technical teams or workgroups.
• Desired: Practical knowledge of project management methodologies.
• Desired: Ability to collaborate across multiple technical specialties to develop integrated solutions.
• Desired: Experience engaging with external stakeholders regarding operational policies and technical procedures.

What You Can Expect

A culture of integrity where character and innovation are central. Employees join a high‑performing team dedicated to mission success and the safety of the nation. CACI values the unique contributions of every employee, offering flexible time‑off benefits, robust learning resources, and an environment of trust that supports personal and professional growth.

Pay Range

The proposed salary range for this position is $86,600 – $181,800. Final compensation may vary based on geographic location, federal contract labor categories and wage rates, relevant prior experience, specific skills and competencies, education, and certifications.