Cybersecurity GRC Assessor - Risk & Compliance

CompQsoft Inc; New York (NY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

CompQsoft Inc. is seeking a Cybersecurity Assessor to evaluate enterprise systems, networks, and applications for vulnerabilities and regulatory compliance, with a focus on documenting findings and actionable remediation plans.

The role emphasizes RMF lifecycle control assessments, POA&M tracking, and cross-functional communication using Archer/ServiceNow, Power BI, and MS Excel. Based in New York, you will collaborate with business and IT teams to strengthen security controls and reduce

Qualifications

• Experience with NIST SP 800-53 and 800-37 and regulatory compliance interpretation.
• Expertise in third-party risk assessments and remediation tracking.
• Ability to document findings and provide actionable remediation plans.

Responsibilities

• Conduct security and compliance assessments across internal systems and third-party vendors.
• Analyze findings and support remediation efforts; track POA&M documentation.
• Collaborate with business and technical teams to translate requirements into concrete actions.
• Maintain risk documentation and dashboards to communicate security posture.

Skills

GRC methodologies

Security control auditing

Third-party risk assessments

POA&M management

Risk reporting

Cross-functional coordination

Data-driven risk reporting

Tools

Archer

ServiceNow

OneTrust

Prevalent

Power BI

Excel

Visio

JIRA

Job description

CompQsoft Inc. is seeking a Cybersecurity Assessor to evaluate enterprise systems, networks, and applications for vulnerabilities and regulatory compliance, with a focus on documenting findings and actionable remediation plans.

The role emphasizes RMF lifecycle control assessments, POA&M tracking, and cross-functional communication using Archer/ServiceNow, Power BI, and MS Excel. Based in New York, you will collaborate with business and IT teams to strengthen security controls and reduce