Security Control Assessor (SCA)

Cymertek•Chantilly, VA

6d•Onsite

About The Position

We are seeking a meticulous and detail-oriented Security Control Assessor (SCA) to join our team and ensure that our information systems meet the highest standards of security and compliance. In this role, you will be responsible for assessing and evaluating the effectiveness of security controls across various systems, identifying vulnerabilities, and ensuring compliance with relevant security frameworks and regulations. You will collaborate with IT and security teams to review system configurations, conduct audits, and provide actionable recommendations for strengthening security measures. The ideal candidate is passionate about maintaining robust security postures, has strong analytical skills, and excels in a collaborative environment. Join us to contribute to safeguarding our systems and ensuring ongoing compliance with industry standards.

Requirements

Proficiency in security frameworks (e.g., NIST, ISO 27001)
Strong understanding of security control testing and evaluation methods
Experience with security audits and risk assessments
Knowledge of regulatory compliance requirements (e.g., HIPAA, GDPR)
Ability to interpret and apply security policies and procedures
Familiarity with vulnerability scanning and management tools
TS/SCI Full Poly clearance
Full U.S. Citizenship

Nice To Haves

Experience with Security Information and Event Management (SIEM) tools
Knowledge of penetration testing techniques and tools
Familiarity with risk management frameworks (e.g., OCTAVE, FAIR)
Experience with continuous monitoring and automated security assessments
Proficiency in writing technical security documentation and reports
Knowledge of cloud security architectures and controls

Responsibilities

Assess the effectiveness of security controls in information systems
Conduct security control testing and evaluations
Identify security gaps and vulnerabilities in systems
Collaborate with cross-functional teams to review and implement security controls
Ensure compliance with industry standards and regulations (e.g., NIST, FISMA)
Provide detailed reports with findings and recommendations for remediation