Security Assessor

Job Summary

Supporting security and privacy control assessments for public sector systems, the full-time remote Security Assessor will evaluate control effectiveness, validate evidence, and contribute to formal assessment documentation under the guidance of a Senior Security Assessor.

Key responsibilities:

• Perform security and privacy control assessments in alignment with established plans
• Document assessment results and articulate control gaps and risks clearly
• Identify opportunities to enhance assessment efficiency through standardization and automation

Required qualifications:

• Minimum of three years of experience in security control assessments or audits
• Bachelor's degree is required
• Hands-on experience with formal security assessment documentation (SSPs, SARs, POA&Ms)
• Working knowledge of NIST SP 800 53 security and privacy controls
• Understanding of risk-based assessment concepts