Cyber Security Controls Assessor

KellyMitchell Group; Oakland (CA); Hybrid; USD 66,000 - 95,000; Part time

Benefits offered by this job

Medical, Dental, & Vision Insurance

Employee-owned Profit Sharing (ESOP)

401K offered

Job summary

KellyMitchell is seeking a Cyber Security Controls Assessor in Oakland, CA, offering a hybrid schedule. You will support IAM compliance testing and ITGC work, aligning with NIST principles and audit readiness. The role involves collaboration with IT, Security, and external auditors.

The ideal candidate has 5+ years in IT Audit/Compliance, strong Excel, and experience with IAM control testing. A Bachelor's degree and relevant security certifications are preferred.

Qualifications

• 5+ years in IT Audit, IT Compliance, or Cybersecurity Controls with ITGC testing.
• Hands-on IAM control testing experience: planning, walkthroughs, testing, docs.
• Strong IT compliance knowledge, control concepts, and audit methodologies.
• Experience with NIST-aligned IT compliance and control testing.
• Advanced Excel: pivot tables, VLOOKUP/XLOOKUP, complex formulas.
• Proven collaboration with external auditors, IT and security teams.
• Strong analytical, documentation, communication, and PM skills.

Responsibilities

• Plan and execute IAM compliance and ITGC testing with the IAM MAP Lead.
• Conduct control walkthroughs with system owners and craft audit-ready narratives.
• Test controls, review evidence, and document results per Internal Audit standards.
• Identify deficiencies, provide remediation guidance, track actions to closure.
• Coordinate with owners, IT, Security to obtain complete audit evidence.
• Develop data analyses and dashboards using advanced Excel to support conclusions.
• Collaborate with internal/external stakeholders to support audit readiness and close gaps.

Skills

IT Audit

IT Compliance

Cybersecurity Controls

ITGC testing

IAM control testing

NIST-aligned IT compliance

Advanced Excel

External auditors collaboration

Documentation & reporting

Education

Bachelor's degree in Information Systems or related field

CISA, CRISC, CISSP or other relevant certification

Tools

SAP

Oracle

GRC tools

COBIT

Job description

Job Summary

Our client, a leading technology and business solutions provider, is seeking a Cyber Security Controls Assessor to join their team. This role will support Identity and Access Management (IAM) compliance testing, with a strong focus on IT General Controls (ITGCs), NIST-aligned principles, and audit readiness.

Contract Details

Contract Type: Contract Location: Oakland, CA Work Model: Hybrid

Core Responsibilities

• Support the IAM MAP Lead in planning and executing IAM compliance and ITGC testing activities
• Conduct detailed control walkthroughs with system owners, validate control design, and develop clear, audit-ready narratives
• Execute control testing, review evidence and workpapers, and document testing results in accordance with Internal Audit standards
• Identify IT control deficiencies, provide remediation guidance, and track corrective actions through closure
• Coordinate with system owners, IT, and Security stakeholders to obtain complete and timely audit evidence
• Develop data analysis and reporting outputs using advanced Excel techniques to support testing conclusions
• Partner with internal stakeholders and external auditors throughout testing cycles to support audit readiness and resolve control gaps

Required Skills/Experience (Must-Haves)

• 5+ years of experience in IT Audit, IT Compliance, Cybersecurity Controls, or a related field, including ITGC testing
• Hands-on experience supporting IAM control testing, including planning, walkthroughs, test execution, documentation, and results reporting
• Strong understanding of IT compliance requirements, control concepts, and audit methodologies
• Experience with NIST-aligned IT compliance and control testing
• Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, and complex formulas
• Proven experience collaborating with external auditors, system owners, IT teams, Security teams, and internal stakeholders
• Strong analytical, documentation, communication, and project management skills

Preferred Skills/Experience (Nice-to-Haves)

• Bachelor's degree in Information Systems or a related field
• CISA, CRISC, CISSP, or other relevant professional certification
• Experience working with ERP systems such as SAP or Oracle
• Familiarity with COBIT and other IT control frameworks
• Experience using audit, compliance, or GRC tools
• Experience providing remediation guidance and tracking corrective actions to closure
• Experience supporting enterprise-level audit readiness initiatives

Key Competencies & Behaviors

• Strategic and analytical thinker with strong problem-solving abilities
• Confident communicator who can effectively engage technical and non-technical stakeholders
• Detail-oriented with a strong focus on audit-quality documentation and accuracy
• Able to manage multiple priorities, lead workstreams, and meet tight deadlines
• Adaptable and comfortable working in fast-paced, evolving cybersecurity and compliance environments

Work Environment

Location: Oakland, CA Work Model: Hybrid

Compensation & Benefits

Pay Range: The approximate pay range for this position is between $48.00 and $69.41. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.

• Medical, Dental, & Vision Insurance Plans
• Employee-owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We're movers and shakers! We don't mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.