Security Control Assessor

Job Summary

Collaborating closely with FDIC system owners, the full-time Security Control Assessor will manage the cybersecurity posture of organizational systems, ensuring compliance with federal frameworks while conducting risk assessments and developing security plans in a hybrid remote environment.

Key responsibilities

• Identify and document security and privacy requirements for systems and organizations
• Conduct ongoing risk assessments and develop strategies for monitoring security and privacy controls
• Report on the security status of systems and ensure remediation plans are in place for identified vulnerabilities

Required qualifications

• 4-6 years of relevant cybersecurity experience, particularly in security control assessments
• Bachelor's degree in a cyber-related field or equivalent experience/certifications
• Knowledge of federal cybersecurity governance frameworks such as RMF, FedRAMP, and NIST SP 800-53
• Demonstrated experience with cybersecurity principles, threats, and vulnerabilities
• U.S. citizenship and eligibility for Public Trust clearance