Cybersecurity Risk & Controls Engineer

Iconma Portal•Atlanta, GA

1d•Hybrid

About The Position

The Cybersecurity Risk & Controls Engineer is responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions. The role works closely with engineering, operations, architecture, risk, audit, and control partners to manage security risks and ensure controls are appropriately designed, implemented, and operating effectively. It combines hands-on security expertise with risk management, governance, and control oversight across blockchain, cloud, and enterprise platforms. The position is based in Atlanta, Georgia, with a hybrid work arrangement. The employer is an IT Services and Consulting company. The posting states 16.00 years of experience but separately lists 5+ years as a requirement; the stated minimum requirement is 5+ years.

Requirements

Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field, or equivalent experience.
5+ years of experience in cybersecurity, technology risk, information security, risk management, or controls governance.
Experience conducting security risk assessments and control evaluations.
Experience driving remediation activities and managing security issues through closure.
Strong understanding of security frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards.
Understanding of cloud security principles and common cloud service providers such as AWS, Azure, or GCP.
Knowledge of identity and access management, secrets management, encryption, and key management practices.
Experience supporting audits, regulatory assessments, or compliance reviews.
Strong analytical, problem-solving, and communication skills.
Ability to work effectively with technical and non-technical stakeholders.

Nice To Haves

Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms such as Ethereum, Hyperledger Besu, Canton, Solana, or Polygon.
Experience with secure software development lifecycle (SSDLC) and DevSecOps practices.
Experience with vulnerability management and security testing programs.
Experience with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow GRC, or MetricStream.
Experience developing risk metrics, dashboards, and executive reporting.
Familiarity with CI/CD pipelines and cloud-native security controls.
Professional certifications such as CISSP, CISM, CRISC, CISA, or CCSP.
AWS Security Specialty certification or equivalent.

Responsibilities

Conduct security risk assessments and identify control gaps across applications, infrastructure, cloud, and blockchain environments.
Drive remediation of security findings, vulnerabilities, audit issues, and control deficiencies through closure.
Design, implement, and assess security controls for effectiveness and regulatory compliance.
Partner with engineering, architecture, and operations teams to integrate security and controls into system design and delivery processes.
Perform threat modeling, security reviews, and vulnerability assessments to proactively identify risks.
Support identity and access management, secrets management, encryption, and key management practices.
Participate in architecture and solution reviews to ensure alignment with enterprise security standards.
Support internal audits, regulatory reviews, and compliance assessments, including evidence collection and issue remediation.
Develop security policies, standards, procedures, and control documentation.
Monitor risk, remediation, and control-effectiveness metrics and provide reporting to management.
Evaluate security technologies and recommend solutions to strengthen the organization's security posture.
Provide security and risk guidance to stakeholders and promote a strong security and control culture.