Security Control Assessor; SCA

Security Control Assessor (SCA)

We are seeking a meticulous and detail-oriented Security Control Assessor (SCA) to join our team and ensure that our information systems meet the highest standards of security and compliance. In this role, you will be responsible for assessing and evaluating the effectiveness of security controls across various systems, identifying vulnerabilities, and ensuring compliance with relevant security frameworks and regulations. You will collaborate with IT and security teams to review system configurations, conduct audits, and provide actionable recommendations for strengthening security measures.

The ideal candidate is passionate about maintaining robust security postures, has strong analytical skills, and excels in a collaborative environment. Join us to contribute to safeguarding our systems and ensuring ongoing compliance with industry standards.

Position Responsibilities:

• Assess the effectiveness of security controls in information systems
• Conduct security control testing and evaluations
• Identify security gaps and vulnerabilities in systems
• Collaborate with cross-functional teams to review and implement security controls
• Ensure compliance with industry standards and regulations (e.g., NIST, FISMA)
• Provide detailed reports with findings and recommendations for remediation

Required Skills:

• Proficiency in security frameworks (e.g., NIST, ISO 27001)
• Strong understanding of security control testing and evaluation methods
• Experience with security audits and risk assessments
• Knowledge of regulatory compliance requirements (e.g., HIPAA, GDPR)
• Ability to interpret and apply security policies and procedures
• Familiarity with vulnerability scanning and management tools

Desired

Skills:

• Experience with Security Information and Event Management (SIEM) tools
• Knowledge of penetration testing techniques and tools
• Familiarity with risk management frameworks (e.g., OCTAVE, FAIR)
• Experience with continuous monitoring and automated security assessments
• Proficiency in writing technical security documentation and reports
• Knowledge of cloud security architectures and controls