Cybersecurity Compliance Assessor I

The role of Cybersecurity Compliance Assessor I is two-part.  The first is to evaluate the security controls within the enterprise architecture to identify vulnerabilities.  Our general assessments measure clients against a subset of the NIST 800-53 catalog of security and privacy controls. Our assessors must have enough IT background to analyze information and prepare reports defining the client’s maturity level for each security objective. The second is to provide recommendations to address deficiencies and improve the overall security of the enterprise architecture. Our team provides strategic guidance to clients regarding technology and IT infrastructures. Compliance Assessors may also be called on to assist with IT Compliance projects and/or documentation (e.g., vendor selection & procurement, and privacy and cybersecurity user training, continuity of operations, disaster recovery, incident response, user and access management, change management, vulnerability testing, etc.).  Must be a US citizen due to federal client and able to pass a background check and drug screen.

• Read client policy and procedural documentation, and compare to regulatory and organizational requirements to identify gaps.
• Interview client staff to understand and verify what processes and tools are followed and utilized.
• Perform analysis through interviews and examination of documentation to measure implementation maturity levels.
• Provide recommendations based on best practices and defined standards.
• Follow basic audit and assessment guidelines as outlined by ISACA.
• Deliver products to technical staff and Executive levels through remote and onsite presentations.
• Utilize secure methods of delivery.
• Liaise with staff at all levels of a client organization.

Requirements