Security & Privacy Assessment Specialist in Sacramento, CA

Required Qualifications
Education
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Security, Compliance, Risk Management, or related discipline, or equivalent relevant professional experience.

Professional Experience
5+ years of experience in cybersecurity compliance, security assessment, GRC, audit, security documentation, or related fields.
Experience supporting security-control assessments.
Experience developing or maintaining assessment documentation.
Experience with evidence management and control traceability.
Experience preparing security assessment reports.
Experience maintaining compliance documentation.
Experience working with GRC or assessment-management tools.
Experience with regulated environments preferred.
Experience supporting cloud-security assessments preferred.
Experience with CMS or federal security documentation desirable.

Required Knowledge
The consultant should demonstrate knowledge of:
Security control assessment
Security compliance
GRC
ARC-AMPE
NIST SP 800-53 Rev. 5
CMS security requirements
Evidence management
Control mapping
Assessment workpapers
Findings management
Corrective-action tracking
Security assessment reporting
Security Assessment Workbook
Data protection
Privacy controls
Cloud security concepts
Security risk management

Preferred Certifications:
CISA- Audit and assessment
CGRC- Governance, risk and compliance
CAP-Security assessment/authorization
CISSP- Broad security knowledge
Relevant CMS/NIST Training- Assessment and compliance activities