Security Risk Assessor

Fortress Information Security•Orlando, FL

2d•$67,832 - $94,212•Remote

About The Position

The Security Risk Assessor, Cybersecurity TPRM is an individual contributor responsible for timely and effective reviews of security assessments in accordance with service level agreements and quality standards. The role also trains and oversees the work product of less experienced staff. The position works with internal partners, clients, and third parties to assess and address third-party risks, and supports account management activities as needed.

Requirements

At least 2 years of proven work experience in cybersecurity control reviews, operational risk management, information security, crisis management, security standards or assessments, or risk management.
Experience in a customer- or client-facing environment.
Experience working in highly regulated industries, such as financial services, energy, or healthcare.
Solid understanding of risk management concepts, particularly information security, IT general controls, and basic audit terminology and concepts.
Understanding of information security frameworks such as NIST 800-53, NIST CSF, and ISO 27001.
Attention to detail, sound judgment, and logical thinking.
Ability to follow established scripts and consistency models, complete tasks, meet deadlines in a fast-paced environment, and adapt to a changing business environment with periodic supervision.
Professional communication and client relationship skills.
Strong computer skills, including Microsoft Office Suite, Google products, and other business software.
Ability to leverage AI tools and independently use and refine prompts to enhance the quality, efficiency, and insight of regular work processes.
Associate degree required.

Nice To Haves

Big 4 experience.
Record of success as a top performer.
Experience in regulated industries, including financial services (PCI, GLBA), energy (NERC CIP), or healthcare (HIPAA).
Proven ability to prioritize schedules and adjust workload to meet tight deadlines and challenging objectives.
Certifications in security or risk management, such as CTPRP, CRISC, CISA, CISSP, or Security+.
Bachelor’s degree preferred.

Responsibilities

Deliver assigned workload, commitments, deadlines, and objectives in accordance with established service level agreements, using appropriate tools, methods, frameworks, and professional standards.
Work independently and represent the department’s services professionally.
Collaborate with internal partners and third parties to enhance, mitigate, and resolve third-party risks.
Serve as a key first point of contact for Fortress clients and their third parties.
Execute the Validated Controls Assessment (VCA) workflow for assigned clients.
Conduct issue remediation reviews, including identifying findings, coordinating vendor plans and dates, and reviewing submitted evidence to recommend closure of findings.
Support Managers and Account Leaders with account management activities as needed.
Train and oversee the work product of less experienced staff.
Perform other duties as assigned.

Benefits

Medical, dental, and vision plans, with employees covered up to 90% and options for dependents and families.
Company-paid life insurance and short- and long-term disability insurance.
Employee Assistance Program.
401(k) match.
Flexible Paid Time Off.
Parental Leave.
Professional growth opportunities through succession planning, up-skilling, and certifications.
Tuition and certification reimbursement.
Employee Referral Programs.
Company-sponsored events.
Remote and hybrid working environment.
Competitive pay structure.