Cyber Security Controls Assessor – Hybrid (GCCs/SOX)

Finezi Inc.; Oakland (CA); On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Client laptop provided

Flexible working hours

Job summary

A leading IT compliance firm is seeking a Cyber Security Controls Assessor to evaluate enterprise IT security against regulatory standards. The role is hybrid, requiring some onsite presence, and focuses on compliance reviews and security control assessments. Candidates should have a BA/BS degree and at least 3 years of IT experience, along with an active certification such as CISA or CISSP. Strong analytical, communication skills, and experience with security frameworks are essential.

Qualifications

• 3+ years of IT experience, ideally in IT security or risk management.
• Must hold at least one active certification like CISA or CISSP.
• Utility industry experience preferred.

Responsibilities

• Conduct thorough IT compliance reviews and control assessments.
• Evaluate compliance with NIST and SOX regulations.
• Provide remediation recommendations to address control gaps.

Skills

Attention to detail

Analytical skills

Communication skills

Ability to manage multiple assessments

Education

BA/BS in Computer Science, Business, or equivalent

Tools

Excel

Job description

A leading IT compliance firm is seeking a Cyber Security Controls Assessor to evaluate enterprise IT security against regulatory standards. The role is hybrid, requiring some onsite presence, and focuses on compliance reviews and security control assessments. Candidates should have a BA/BS degree and at least 3 years of IT experience, along with an active certification such as CISA or CISSP. Strong analytical, communication skills, and experience with security frameworks are essential.