Cyber Security Controls Assessor

About the Role

Our client, a leading technology and business solutions provider, is seeking a Cyber Security Controls Assessor to join their team. This role will support Identity and Access Management (IAM) compliance testing, with a strong focus on IT General Controls (ITGCs), NIST-aligned principles, and audit readiness.

Core Responsibilities

• Support the IAM MAP Lead in planning and executing IAM compliance and ITGC testing activities
• Conduct detailed control walkthroughs with system owners, validate control design, and develop clear, audit-ready narratives
• Execute control testing, review evidence and workpapers, and document testing results in accordance with Internal Audit standards
• Identify IT control deficiencies, provide remediation guidance, and track corrective actions through closure
• Coordinate with system owners, IT, and Security stakeholders to obtain complete and timely audit evidence
• Develop data analysis and reporting outputs using advanced Excel techniques to support testing conclusions
• Partner with internal stakeholders and external auditors throughout testing cycles to support audit readiness and resolve control gaps

Required Skills & Experience

• 5+ years of experience in IT Audit, IT Compliance, Cybersecurity Controls, or a related field, including ITGC testing
• Hands-on experience supporting IAM control testing, including planning, walkthroughs, test execution, documentation, and results reporting
• Strong understanding of IT compliance requirements, control concepts, and audit methodologies
• Experience with NIST-aligned IT compliance and control testing
• Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, and complex formulas
• Proven experience collaborating with external auditors, system owners, IT teams, Security teams, and internal stakeholders
• Strong analytical, documentation, communication, and project management skills

Preferred Qualifications

• Bachelor's degree in Information Systems or a related field
• CISA, CRISC, CISSP, or other relevant professional certification
• Experience working with ERP systems such as SAP or Oracle
• Familiarity with COBIT and other IT control frameworks
• Experience using audit, compliance, or GRC tools
• Experience providing remediation guidance and tracking corrective actions to closure
• Experience supporting enterprise-level audit readiness initiatives

Key Competencies & Behaviors

• Strategic and analytical thinker with strong problem-solving abilities
• Confident communicator who can effectively engage technical and non-technical stakeholders
• Detail-oriented with a strong focus on audit-quality documentation and accuracy
• Able to manage multiple priorities, lead workstreams, and meet tight deadlines
• Adaptable and comfortable working in fast-paced, evolving cybersecurity and compliance environments

Work Environment

• Location: Oakland, CA
• Work Model: Hybrid

Compensation & Benefits

• Pay Range: $48.00 - $69.41 per hour (final compensation may vary based on factors including background, knowledge, skills, and location)
• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered