Cybersecurity Risk & Controls Engineer

ICONMA; Atlanta (GA); Hybrid; USD 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Health Benefits

Referral Program

Excellent growth and advancementOpport

Hybrid work arrangement

Zusammenfassung

ICONMA is seeking a seasoned Cybersecurity Risk & Controls Engineer to assess technology and security risks, drive remediation, and strengthen control frameworks across cloud, blockchain, and enterprise platforms. You will partner with engineering and risk teams to implement secure and compliant solutions and support audits and regulatory reviews.

The role emphasizes hands-on security with governance, risk, and control oversight, including threat modeling and vulnerability assessments, while

Qualifikationen

• Bachelor's degree in a related field or equivalent experience.
• Minimum 5+ years of cybersecurity, technology risk, information security, risk management, or controls governance.
• Experience conducting security risk assessments and control evaluations.
• Experience driving remediation activities and managing security issues through closure.
• Strong understanding of security frameworks (NIST, ISO 27001, CIS Controls, COBIT).
• Knowledge of cloud security principles and leading providers (AWS/Azure/GCP).
• Familiarity with identity and access management, secrets management, encryption, and key management practices.
• Experience supporting audits, regulatory assessments, or compliance reviews.
• Strong analytical, problem-solving, and communication skills.

Aufgaben

• Identify and assess technology and security risks and drive remediation.
• Strengthen control frameworks and ensure secure, compliant solutions across platforms.
• Collaborate with engineering and risk partners to design and operate security controls.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Support internal audits and regulatory assessments with evidence collection and remediation.
• Develop risk metrics, dashboards, and executive reporting.
• Promote secure software development lifecycle (SSDLC) and DevSecOps practices.
• Integrate security controls into system design and delivery processes.
• Provide guidance to stakeholders to foster a security-centric culture.

Kenntnisse

Security Risk & Controls

Risk Assessment

Control Evaluation

Remediation

NIST/ISO 27001

Cloud Security

Audit & Compliance

Blockchain Security

IAM

Cryptography

DevSecOps/SSDLC

Vulnerability Management

GRC Tools

CI/CD Security

AWS

Azure

GCP

Ausbildung

Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field

Tools

Archer

ServiceNow GRC

MetricStream

AWS

Azure

GCP

Jobbeschreibung

ICONMA is recruiting for a confidential IT services and consulting client. The Cybersecurity Risk & Controls Engineer will assess technology and security risks, drive remediation, strengthen control frameworks, and partner with teams to implement secure and compliant solutions across blockchain, cloud, and enterprise platforms.

Responsibilities

• Security Engineer – Risk & Controls We are seeking a skilled and motivated Security Engineer – Risk & Controls to join our team
• This role is responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions
• The successful candidate will work closely with engineering, operations, architecture, risk, audit, and control partners to ensure security risks are effectively managed and that security controls are appropriately designed, implemented, and operating effectively
• The role combines hands-on security expertise with risk management, governance, and control oversight responsibilities across blockchain, cloud, and enterprise platforms
• Conduct security risk assessments and identify control gaps across applications, infrastructure, cloud, and blockchain environments
• Drive remediation of security findings, vulnerabilities, audit issues, and control deficiencies through closure
• Design, implement, and assess security controls to ensure effectiveness and regulatory compliance
• Partner with engineering, architecture, and operations teams to integrate security and controls into system design and delivery processes
• Perform threat modeling, security reviews, and vulnerability assessments to proactively identify risks
• Support identity and access management, secrets management, encryption, and key management practices
• Participate in architecture and solution reviews to ensure alignment with enterprise security standards
• Support internal audits, regulatory reviews, and compliance assessments, including evidence collection and issue remediation
• Develop security policies, standards, procedures, and control documentation
• Monitor risk, remediation, and control effectiveness metrics and provide reporting to management
• Evaluate security technologies and recommend solutions to strengthen the organization's security posture
• Provide security and risk guidance to stakeholders and promote a strong security and control culture

Skills

• Security Risk & Controls
• Risk Assessment
• Control Evaluation
• Remediation
• NIST/ISO 27001
• Cloud Security
• Audit & Compliance
• Blockchain Security
• IAM
• Cryptography
• DevSecOps/SSDLC
• Vulnerability Management
• GRC Tools
• CI/CD Security
• Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field (or equivalent experience)
• 5+ years of experience in cybersecurity, technology risk, information security, risk management, or controls governance
• Experience conducting security risk assessments and control evaluations
• Experience driving remediation activities and managing security issues through closure
• Strong understanding of security frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards
• Understanding of cloud security principles and common cloud service providers (AWS, Azure, or GCP)
• Knowledge of identity and access management, secrets management, encryption, and key management practices
• Experience supporting audits, regulatory assessments, or compliance reviews
• Strong analytical, problem-solving, and communication skills
• Ability to work effectively with both technical and non-technical stakeholders
• Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms (Ethereum, Hyperledger Besu, Canton, Solana, Polygon, etc.)
• Experience with secure software development lifecycle (SSDLC) and DevSecOps practices
• Experience with vulnerability management and security testing programs
• Experience with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow GRC, or MetricStream
• Experience developing risk metrics, dashboards, and executive reporting
• Familiarity with CI/CD pipelines and cloud-native security controls
• Professional certifications such as CISSP, CISM, CRISC, CISA, or CCSP
• AWS Security Specialty (or equivalent)

Benefits

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities
• Hybrid work arrangement

Company Overview

• ABOUT ICONMA provides Professional Staffing Services & Project-Based Solutions for a broad range of Fortune 500 organizations. It was founded in 2000, and is headquartered in Troy, Michigan, USA, with a workforce of 1001-5000 employees. Its website is http://www.iconma.com.

Company H1B Sponsorship

• ICONMA has a track record of offering H1B sponsorships, with 22 in 2026, 34 in 2025, 31 in 2024, 26 in 2023, 39 in 2022, 37 in 2021, 69 in 2020. Please note that this does not guarantee sponsorship for this specific role.