Cyber Security Controls Assessor
Listed on 2026-09-05
-
IT/Tech
Cybersecurity, IT Business Analyst, IT Consultant
Job Summary
Our client, a leading technology and business solutions provider, is seeking a Cyber Security Controls Assessor to join their team. This role will support Identity and Access Management (IAM) compliance testing, with a strong focus on IT General Controls (ITGCs), NIST-aligned principles, and audit readiness.
Contract DetailsContract Type:
Contract
Location:
Oakland, CA Work Model:
Hybrid
- Support the IAM MAP Lead in planning and executing IAM compliance and ITGC testing activities
- Conduct detailed control walkthroughs with system owners, validate control design, and develop clear, audit-ready narratives
- Execute control testing, review evidence and work papers, and document testing results in accordance with Internal Audit standards
- Identify IT control deficiencies, provide remediation guidance, and track corrective actions through closure
- Coordinate with system owners, IT, and Security stakeholders to obtain complete and timely audit evidence
- Develop data analysis and reporting outputs using advanced Excel techniques to support testing conclusions
- Partner with internal stakeholders and external auditors throughout testing cycles to support audit readiness and resolve control gaps
- 5+ years of experience in IT Audit, IT Compliance, Cybersecurity Controls, or a related field, including ITGC testing
- Hands-on experience supporting IAM control testing, including planning, walkthroughs, test execution, documentation, and results reporting
- Strong understanding of IT compliance requirements, control concepts, and audit methodologies
- Experience with NIST-aligned IT compliance and control testing
- Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, and complex formulas
- Proven experience collaborating with external auditors, system owners, IT teams, Security teams, and internal stakeholders
- Strong analytical, documentation, communication, and project management skills
- Bachelor's degree in Information Systems or a related field
- CISA, CRISC, CISSP, or other relevant professional certification
- Experience working with ERP systems such as SAP or Oracle
- Familiarity with COBIT and other IT control frameworks
- Experience using audit, compliance, or GRC tools
- Experience providing remediation guidance and tracking corrective actions to closure
- Experience supporting enterprise-level audit readiness initiatives
- Strategic and analytical thinker with strong problem-solving abilities
- Confident communicator who can effectively engage technical and non-technical stakeholders
- Detail-oriented with a strong focus on audit-quality documentation and accuracy
- Able to manage multiple priorities, lead work streams, and meet tight deadlines
- Adaptable and comfortable working in fast-paced, evolving cybersecurity and compliance environments
Location:
Oakland, CA Work Model:
Hybrid
Pay Range:
The approximate pay range for this position is between $48.00 and $69.41. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
- Medical, Dental, & Vision Insurance Plans
- Employee-owned Profit Sharing (ESOP)
- 401K offered
At Kelly Mitchell, our culture is world class. We're movers and shakers! We don't mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges.
As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).