Hybrid Security Control Assurance Lead — Control-as-Code

Axiom Path, Inc.; Charlotte (NC); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Axiom Path is seeking a Senior Security Control Assurance Engineer in the Charlotte, NC area to lead the design and maturation of a risk-based security control assurance program across critical systems and environments.

You will engineer automated control testing and evidence-collection capabilities, establish continuous controls monitoring, and develop repeatable testing procedures for security, privacy, and data-protection controls to drive measurable improvements.

Qualifications

• 8+ years in cybersecurity assurance, engineering or related fields.
• Hands-on automation of security-control testing and evidence collection.
• Scripting in Python, Rust or Ruby; API integrations.
• Familiar with NIST CSF and ISO 27001.
• Experience with AWS and/or GCP security services.
• Bachelor's degree in CS/Engineering/Info Security.
• Security certifications (CISSP, CISA, CISM, CRISC) preferred.

Responsibilities

• Design and mature a risk-based security control assurance program across critical systems.
• Engineer automated control testing and evidence-collection capabilities via scripting and integrations.
• Establish continuous controls monitoring to surface issues in near real time.
• Develop repeatable testing procedures for security, privacy and data protection controls.
• Evaluate controls against key frameworks and regulations (NIST CSF, ISO 27001, GDPR).
• Connect security, IT, cloud, data, and GRC platforms to centralize evidence and remediation info.
• Automate deficiency intake, ownership, remediation workflows, and control-health reporting.
• Partner with engineering to embed control validation in CI/CD and SDLC processes.
• Define metrics for control coverage, automation, failures, and remediation time.

Skills

Cybersecurity experience

Automation scripting

APIs integration

NIST/ISO knowledge

Cloud security

Communication

Security certifications

Education

Bachelor's degree in CS/Engineering/Info Security

Tools

GRC platforms

Job description

Axiom Path is seeking a Senior Security Control Assurance Engineer in the Charlotte, NC area to lead the design and maturation of a risk-based security control assurance program across critical systems and environments.

You will engineer automated control testing and evidence-collection capabilities, establish continuous controls monitoring, and develop repeatable testing procedures for security, privacy, and data-protection controls to drive measurable improvements.