Security Control Assessor

CISEVE is seeking a skilled Security Control Assessor to join our dynamic team. The Security Control Assessor will be responsible for evaluating and assessing the efficacy of security controls implemented across various platforms and applications. Perform as a security control assessor as part of a team in conducting NIST and FISMA Assessment activities to determine if the client controls are implemented and functioning as designed.

Assessment support for executing full A&A life cycle, evaluating system documentation, interviewing appropriate system and site personnel, testing system technical and configuration settings, reviewing scan results, and developing Final report.

Responsibilities

• Conduct thorough security assessments of organizational information systems and applications.
• Evaluate the effectiveness of existing security controls.
• Compile assessment reports detailing findings, implications, and recommended actions.
• Support the risk management process by providing information on security vulnerabilities.
• Ensure compliance with federal and organizational security standards.
• Develop security assessment plans.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• At least 3 years of experience in security assessments or related roles.
• Experience conducting FISMA assessments
• Strong understanding of security frameworks (e.g., NIST, ISO 27001, etc.).
• Excellent analytical and problem-solving skills.
• Effective communication skills for reporting to technical and non-technical stakeholders.
• IAT-Level II Certification, preferred Certifications such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP).