Cybersecurity Assessor — GRC & Risk Analyst

CompQsoft Inc; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

CompQsoft Inc in Brooklyn, NY seeks a Cybersecurity Assessor to evaluate enterprise systems, networks, and applications for vulnerabilities and regulatory compliance.

You will collaborate with business and technical teams, perform security control testing, and support remediation through POA&M tracking and risk reporting. 5+ years of experience and relevant certifications are expected.

Qualifications

• Five plus years of cybersecurity experience with governance, risk and compliance.
• Ability to interpret federal mandates (NIST 800-53/800-37) and evaluate controls.
• Experience in security assessment of internal and third-party systems.

Responsibilities

• Conduct security and compliance assessments for enterprise systems and vendors.
• Document findings and support remediation via POA&M tracking.
• Collaborate with stakeholders to translate requirements into concrete actions.

Skills

GRC methodologies

Security control auditing

Third-party risk assessments

NIST SP 800-53/800-37

POA&M management

RMF lifecycle

Risk reporting & dashboards

Tools

Archer

ServiceNow

OneTrust

Prevalent

JIRA

MS Power BI

Excel

MS Visio

Job description

CompQsoft Inc in Brooklyn, NY seeks a Cybersecurity Assessor to evaluate enterprise systems, networks, and applications for vulnerabilities and regulatory compliance.

You will collaborate with business and technical teams, perform security control testing, and support remediation through POA&M tracking and risk reporting. 5+ years of experience and relevant certifications are expected.