Security Assessor​/Analyst Lead

Job Family :

Technology Consulting

Travel Required :

Up to 10%

Clearance Required :

None

What You Will Do:

The Security Assessment Lead will lead and support security and privacy control assessments for public-sector and regulated environments, providing technical leadership, quality oversight, and day-to-day supervision of assessment teams. The role will evaluate the effectiveness of security and privacy controls, validate technical and procedural evidence, advise clients on identified risks and remediation considerations, and oversee the development of high-quality assessment documentation.

In addition to assessment delivery, this role will help mature and scale security assessment capabilities through standardized methodologies, automation, emerging technologies, and development of assessment team members. The successful candidate will bring the experience and judgment to independently lead assessment activities, engage effectively with senior client stakeholders, and translate complex technical and compliance issues into clear, actionable findings.

Key job responsibilities include the following:

• Lead security and privacy control assessments in accordance with established assessment plans, applicable standards, and client requirements.

• Supervise and provide day-to-day direction to teams of security assessors, including assignment of assessment activities, review of work products, quality assurance, coaching, and professional development.

• Lead assessment planning, execution, documentation, and reporting activities across multiple systems, work streams, or client stakeholders.

• Review security documentation and technical evidence to evaluate the design, implementation, and operating effectiveness of security and privacy controls.

• Lead and participate in control validation activities, including:
  Evidence inspection and analysis
  
  Architecture and system documentation review
  
  Interviews and working sessions with system owners, security personnel, and technical stakeholders
  
  Evaluation of technical configurations and other implementation evidence, as applicable

• Lead the development and quality review of assessment artifacts, including:
  System Security Plans (SSPs)
  Security Assessment Reports (SARs)
  Independent Security Risk Assessments (ISRAs)
  Plans of Action and Milestones (POA&Ms)
  Other risk, compliance, and authorization documentation

• Clearly articulate control deficiencies, security risks, root causes, and potential remediation considerations to both technical and executive audiences.

• Maintain appropriate assessment independence, objectivity, and professional judgment.

• Serve as a trusted advisor to client stakeholders by helping them understand assessment results, risk implications, and opportunities to strengthen security and privacy controls.

• Establish and promote consistent assessment methodologies, templates, quality standards, and leading practices across assessment teams.

• Identify opportunities to improve assessment efficiency and quality through standardization, tooling, automation, and enhanced evidence collection and validation techniques.

• Support the application of data analytics, AI-assisted techniques, and automation to improve assessment analysis, evidence traceability, reporting, and continuous monitoring.

• Mentor and develop junior and mid-level security professionals and contribute to broader cybersecurity capability development and knowledge sharing.

What You Will Need:

• Minimum of FIVE (5) years of professional experience.

• Experience in cybersecurity, information security, technology risk, audit, security control assessment, authorization, or related disciplines.

• Minimum of THREE (3) years of supervisory or team leadership experience overseeing security assessor teams or security assessment-related…