NIST Security Control Assessor

Castro & Company; San Juan (PR); Hybrid; USD 80,000 - 100,000; Full time

Job summary

A prominent audit and advisory firm in Puerto Rico seeks a NIST Security Control Assessor to join their IT practice. This hybrid role involves performing independent security assessments, developing Security Assessment Plans, and documenting findings. Candidates must have a relevant Bachelor's degree and 5-8 years of experience with NIST 800-53. The firm fosters a diverse environment and values continuous learning, making it a great opportunity for career development.

Qualifications

• 5-8 years of technical experience in NIST 800-53 assessments.
• Must be able to obtain Security Clearance (US Citizenship required).
• Strong knowledge of NIST 800-53 security controls.

Responsibilities

• Perform independent assessments of security controls.
• Develop and execute Security Assessment Plans (SAPs).
• Prepare and present Security Assessment Reports (SARs).

Skills

NIST 800-53 assessments

Analytical skills

Documentation skills

Communication skills

Problem-solving skills

Collaborative skills

Education

Bachelor’s Degree in IT or related field

Tools

ServiceNow

Job description

A Fulfilling, Challenging, & Rewarding Career Awaits!

As a leading midsize audit, advisory, and accounting firm, we’re seeking well-rounded, ambitious talent to join our growing team.

Current Openings

Position: NIST Security Control Assessor

Location: Hybrid - San Juan, PR

Job Id: 209

# of Openings: 4

Nist Security Control Assessor

We are currently seeking a NIST 800-53 Security Control Assessor interested in starting a rewarding career in public accounting by joining our Information Technology (IT) practice to serve our federal clients. If you are dedicated and eager to grow your auditing career, we will provide you with a supportive team, resources, and training to succeed.

As a Security Control Assessor, your responsibilities will include:

• Perform independent assessments of security controls in accordance with NIST SP 800-53 and NIST SP 800-53A
• Evaluate the design and operating effectiveness of technical, operational, and management controls across federal information systems
• Develop and execute Security Assessment Plans (SAPs), including test procedures, sampling approaches, and evidence requirements
• Conduct control testing activities (interviews, documentation review, and technical validation) in alignment with Risk Management Framework (RMF)
• Analyze assessment results to identify control deficiencies, gaps, and risk exposures
• Document findings with clear risk statements, root cause analysis, and recommended remediation actions
• Prepare Security Assessment Reports (SARs) and present results to Authorizing Officials (AOs), system owners, and stakeholders
• Support Authorization to Operate (ATO) processes, including control validation and continuous monitoring activities
• Collaborate with system owners, ISSOs, and engineering teams to validate remediation efforts and perform re-testing
• Maintain assessment documentation within GRC tools (e.g., ServiceNow)
• Stay current with evolving federal cybersecurity requirements, including FISMA and OMB/NIST guidance
• Contribute to audit readiness and compliance initiatives across client environments

Requirements:

• Bachelor’s Degree in an IT-related field from an accredited school.
• Must be able to obtain Security Clearance: Must be able to pass a basic government suitability check (US Citizenship required).
• 5-8 Years of technical experience in NIST 800-53 assessments.
• Strong knowledge and demonstrated understanding of NIST 800-53, security and privacy controls.
• Strong analytical and problem-solving skills
• Experience communicating technical findings to both technical and non-technical stakeholders
• Detail-oriented with strong documentation and reporting skills
• Experience working independently and collaboratively in a team environment
• Certification (preferred) includes CISSP, Security+, CISA

Castro Puerto Rico is a Professional Services Center headquartered in San Juan, Puerto Rico, delivering advisory, accounting, audit and IT support services to Federal Government clients. We are dedicated to assisting our clients to accomplish their strategic goals while providing our people with a diverse and inclusive environment to thrive and succeed.

Castro Puerto Rico is an Equal Opportunity Employer and considers all qualified applicants without regard to color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability and any other classification protected by law.