Security Control Assessor

Cynet Systems • Richmond, VA

1d

About The Position

The Security Control Assessor will conduct thorough evaluations of information security controls to identify potential threats and vulnerabilities to information systems. This role involves performing detailed reviews of security controls, policies, and procedures to prioritize risks and recommend enhancements that support organizational security goals. The assessor will also review data and advise customers on Security Assessment and Authorization (SAFR) requirements and best practices, participate in project development for new processes, and assist in communicating process changes to impacted clients. The position requires strong analytical skills, attention to detail, and the ability to build collaborative relationships.

Requirements

• Bachelor's degree in computer science, Information Security, or equivalent experience.
• Proven experience with conducting security assessments.
• Knowledge of compliance frameworks and continuous authorization processes.
• Knowledge of NIST SP800-37, SP800-53/53a.
• Strong verbal and written communication skills and the ability to work collaboratively.
• Experience reviewing data and advising customers on SAFR requirements and best practices.
• Ability to build strong collaboration and negotiation relationships.
• Creativity and strong attention to detail.
• Understanding and application of risk management discipline in decision making.
• 3+ years of relevant work experience.

Nice To Haves

• Certifications such as CISSP, CISA, CISM.
• Experience in a policy and assurance or quasi-governmental environment.
• Familiarity with cloud service providers and associated security challenges.
• Knowledge of SAFR lifecycle compliance and testing.
• Experience building strong interpersonal collaboration and negotiation relationships.

Responsibilities

• Conduct thorough evaluations of information security controls to identify potential threats and vulnerabilities to information systems.
• Perform detailed reviews of security controls, policies, and procedures to prioritize risks and recommend enhancements that support organizational security goals.
• Review data and assist in advising districts on best practices and how to implement necessary changes to address business and information security needs.
• Participate in project development surrounding new processes and the integration of new processes with existing ones.
• Assist in developing communications of process changes to impacted clients and other resources.
• Perform other related duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level