Cyber Risk & Compliance Assessor

CompQsoft, Inc.; New York (NY); On-site; USD 120,000 - 170,000; Full time

Job summary

CompQsoft, Inc. is seeking a Cybersecurity Assessor to evaluate enterprise systems, networks, and applications, identifying vulnerabilities, assessing risks, and ensuring compliance with security policies and regulatory standards.

You will provide actionable recommendations, collaborate with technical and business teams, and support remediation tracking using RMF, NIST controls, and GRC tools. The role requires 5+ years of experience and certifications (CISA, CRISC, CGEIT, CISSP, CAP/ISC2 CGRC)

Qualifications

• 5+ years of experience in security assessment and risk management.
• Experience interpreting NIST SP 800-53/800-37 controls and risk assessments.
• Proficiency with RMF lifecycle and POA&M tracking.
• Strong ability to translate compliance requirements into remediation actions.
• Experience with GRC tools and third-party risk management processes.

Responsibilities

• Conduct GRC-based assessments, control auditing, and third-party risk evaluations.
• Interpret federal mandates (NIST 800-53/800-37) and assess technical and administrative controls.
• Perform Security Impact Analyses and manage POA&M documentation.
• Support security and compliance assessments across internal systems and vendors.
• Evaluate external service providers' security practices and vendor risks.
• Document findings and track remediation actions with prioritization.
• Collaborate with business and technical teams to clarify compliance requirements.
• Maintain risk documents and dashboards using risk tools and Power BI/Excel.
• Execute RMF lifecycle control assessments and evidence collection.

Skills

GRC methodologies

Security control auditing

Third-party risk assessments

NIST 800-53/800-37

Security Impact Analyses

POA&M management

Cross-functional coordination

Risk reporting

Data-driven insights

Tools

Archer

ServiceNow

OneTrust

Prevalent

Power BI

Excel

Visio

JIRA

Microsoft Office Suite

Job description

CompQsoft, Inc. is seeking a Cybersecurity Assessor to evaluate enterprise systems, networks, and applications, identifying vulnerabilities, assessing risks, and ensuring compliance with security policies and regulatory standards.

You will provide actionable recommendations, collaborate with technical and business teams, and support remediation tracking using RMF, NIST controls, and GRC tools. The role requires 5+ years of experience and certifications (CISA, CRISC, CGEIT, CISSP, CAP/ISC2 CGRC)