Security Control Assessor (SCA)

Position Responsibilities

Assess the effectiveness of security controls in information systems
Conduct security control testing and evaluations
Identify security gaps and vulnerabilities in systems
Collaborate with cross-functional teams to review and implement security controls
Ensure compliance with industry standards and regulations (e.g., NIST, FISMA)

Required Skills

• Proficiency in security frameworks (e.g., NIST, ISO 27001)
• Strong understanding of security control testing and evaluation methods
• Experience with security audits and risk assessments
• Knowledge of regulatory compliance requirements (e.g., HIPAA, GDPR)
• Ability to interpret and apply security policies and procedures
• Familiarity with vulnerability scanning and management tools

Desired Skills

• Experience with Security Information and Event Management (SIEM) tools
• Knowledge of penetration testing techniques and tools
• Familiarity with risk management frameworks (e.g., OCTAVE, FAIR)
• Experience with continuous monitoring and automated security assessments
• Proficiency in writing technical security documentation and reports
• Knowledge of cloud security architectures and controls