Controls Management, Specialist

Core Responsibilities

• Perform cybersecurity control testing and assurance activities to assess control design and operating effectiveness.
• Support and enhance Continuous Controls Monitoring (CCM) capabilities through automation and analytics.
• Identify control gaps, recommend remediation actions, and track improvements.
• Develop metrics, dashboards, and reporting to provide actionable risk insights.
• Partner with security, technology, compliance, and business stakeholders to strengthen the control environment.
• Support security policy, standards, regulatory, and audit-related activities.
• Contribute to control modernization and GRC transformation initiatives.

Qualifications

• 8+ years of experience in cybersecurity, controls assurance, audit, risk management, compliance, or related disciplines.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27002, CIS Controls, and COBIT.
• Strong analytical, communication, and stakeholder management skills.
• Bachelor's degree or equivalent experience.

Preferences

• Experience with Continuous Controls Monitoring (CCM), control automation, and data-driven assurance programs.
• Knowledge of AI governance, AI risk management, and AI-related regulatory requirements.
• Experience using GRC Platforms such as Archer, or similar technologies.
• Cybersecurity certifications such as CISSP, CISM, CISA, CRISC, CIA, or CPA preferred.