Security Control Assessor

Job Title:Security Control Assessor

Job Location:Richmond, VA

Job Type: Contract

Job Overview:

Pay Range: $61.08hr - $66.08hr

Requirement/Must Have:

• Bachelor s degree in computer science, Information Security, or equivalent experience.
• Proven experience with conducting security assessments.
• Knowledge of compliance frameworks and continuous authorization processes.
• Knowledge of NIST SP800-37, SP800-53/53a.
• Strong verbal and written communication skills and the ability to work collaboratively.
• Experience reviewing data and advising customers on SAFR requirements and best practices.
• Ability to build strong collaboration and negotiation relationships.
• Creativity and strong attention to detail.
• Understanding and application of risk management discipline in decision making.

Responsibilities:

• Conduct thorough evaluations of information security controls to identify potential threats and vulnerabilities to information systems.
• Perform detailed reviews of security controls, policies, and procedures to prioritize risks and recommend enhancements that support organizational security goals.
• Review data and assist in advising districts on best practices and how to implement necessary changes to address business and information security needs.
• Participate in project development surrounding new processes and the integration of new processes with existing ones.
• Assist in developing communications of process changes to impacted clients and other resources.
• Perform other related duties as assigned.

Nice to Have:

• Certifications such as CISSP, CISA, CISM.
• Experience in a policy and assurance or quasi-governmental environment.
• Familiarity with cloud service providers and associated security challenges.
• Knowledge of SAFR lifecycle compliance and testing.
• Experience building strong interpersonal collaboration and negotiation relationships.

Skills:

• Security Control Assessment.
• NIST SP800-37.
• NIST SP800-53/53a.
• Risk Management.
• SAFR Requirements.
• Information Security Policy.
• Vulnerability Identification.
• Compliance Frameworks.

Qualification And Education:

• 3+ years of relevant work experience.

Physical Requirements(Due to nature of job, The candidate must have):

• Ability to sit for prolonged periods of time.
• Ability to stand.
• Ability to lift 20 lbs.
• Ability to carry 20 lbs.
• Ability to push 20 lbs.
• Ability to pull 20 lbs.

== ==

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities