Security Control Assessor Apprentice

Citadel•Tamuning, GU

24d

About The Position

The Security Control Assessor Apprentice is an entry-level, structured training position that supports the cybersecurity and compliance team with security documentation, recordkeeping, evidence collection, basic security checks, and administrative coordination. Under the direct supervision of experienced cybersecurity and compliance staff, the Apprentice will gain practical experience with security controls, policies, vulnerability management, audit readiness, incident documentation, and employee security awareness. The Apprentice is not expected or authorized to independently perform security assessments, make compliance determinations, approve remediation actions, or lead security incident investigations.

Requirements

High school diploma or equivalent required.
No previous cybersecurity experience required.
Must provide a High School diploma or equivalent.
Must be a US citizen or resident alien.
Must be at least 18 years of age or older.
Must be a resident of Guam for a period not less than three (3) consecutive years before entry into the program.
Mayor's Verification must be submitted upon hire.
Must be able to attend a minimum of two (2) classes per semester as identified by program coordinator, while working forty (40) hours per week with IT&E.
Basic computer operations, file management, and office procedures.
Microsoft Office applications, including Outlook, Word, Excel, and PowerPoint.
Basic cybersecurity concepts and terminology, or the ability to learn them.
Organizing files, records, and detailed information.
Preparing clear and accurate written notes, trackers, and reports.
Following established procedures and checklists.
Managing assigned tasks, priorities, and deadlines.
Working collaboratively with employees across departments.
Communicate clearly, professionally, and accurately, both verbally and in writing.
Learn and apply cybersecurity policies, procedures, and technical concepts.
Exercise sound judgment and promptly escalate concerns to senior staff.
Handle confidential and sensitive information responsibly.
Work independently on assigned tasks while accepting supervision, feedback, and direction.
Maintain attention to detail while managing multiple assignments.

Nice To Haves

Previous experience with computers, office applications, IT support, or administrative work is helpful but not required.
Entry-level IT or cybersecurity certifications are a plus but are not required.

Responsibilities

Know and uphold established IT&E Mission, policies and procedures, departmental and divisional objectives, quality assurance standards, security requirements, and safety programs.
Assist senior staff with security control reviews by following established checklists and procedures.
Collect, organize, and maintain documentation, screenshots, reports, system-generated evidence, and other information needed for security reviews, audits, and compliance activities.
Record preliminary observations, missing information, and potential findings for review by senior cybersecurity or compliance staff.
Maintain accurate cybersecurity and compliance records, including spreadsheets, trackers, checklists, policy records, audit files, and corrective-action logs.
Assist with tracking open security findings, assigned corrective actions, target completion dates, and supporting documentation; promptly escalate overdue or missing items to the appropriate supervisor.
Learn to use approved cybersecurity tools and assist with basic vulnerability scans, security checks, and reporting activities under direct supervision.
Save, organize, and securely maintain scan results and related evidence; report identified concerns to senior staff for review and direction.
Assist with the maintenance of cybersecurity policies, procedures, standards, and related documentation, including tracking updates, approvals, and distribution of approved materials.
Support security incident documentation by maintaining incident records, organizing supporting materials, documenting assigned meeting notes, and tracking follow-up actions. The Apprentice will immediately report suspected incidents or unusual activity to senior staff and will not independently investigate or resolve incidents.
Assist with cybersecurity awareness efforts by preparing approved awareness materials, tracking employee training completion, sending reminders, and maintaining training records.
Participate in assigned cybersecurity, compliance, and apprenticeship-related training, including instruction on cybersecurity terminology, security controls, documentation practices, and relevant standards and frameworks such as NIST, CMMC, and other requirements applicable to IT&E.
Maintain the confidentiality and secure handling of company, customer, employee, system, and security-related information at all times.
Complete assigned on-the-job learning requirements, related instruction, progress reviews, and competency assessments in accordance with the apprenticeship program.
Perform other apprentice-level duties and responsibilities as assigned or required.