Remote Cyber Security Controls Assessor III (Critical Infra)

Spectraforce Technologies; Oakland (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Spectraforce Technologies is seeking a Cyber Security Controls Assessor III for a remote, four-month engagement (CA- domiciled). The role focuses on assessing and validating cybersecurity controls across IT, OT/ICS, and cloud environments to safeguard energy infrastructure.

The ideal candidate has 5+ years in security controls assessment, familiarity with NIST CSF/800-53, CIS Controls, and regulatory compliance, and strong communication and documentation skills.

Qualifications

• 5+ years of experience in cybersecurity, risk management, compliance, audit, or security controls assessment.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, or related field; or equivalent experience.
• Knowledge of standards and regulatory programs (NIST CSF, NIST 800-53, CIS Controls, and risk management methodologies).
• Experience supporting regulatory compliance programs and audits.
• Strong analytical, communication, and technical documentation skills.

Responsibilities

• Conduct cybersecurity control assessments for enterprise IT, cloud, and OT environments.
• Evaluate controls against standards and regulatory requirements (NIST CSF, NIST 800-53, NERC CIP, CIS).
• Identify risks, deficiencies, and gaps; propose corrective actions.
• Prepare assessment reports with findings, risk ratings, and remediation guidance.
• Collaborate with cybersecurity, engineering, IT, OT, compliance, and business teams to manage risks.
• Validate implementation and effectiveness of controls on projects and upgrades.
• Support internal audits and regulatory reviews related to critical infrastructure protection.

Skills

Security assessments

Risk management

Compliance

Audit support

Technical documentation

Education

Bachelor's degree (Cybersecurity or related)

Tools

GRC platforms

Job description

Spectraforce Technologies is seeking a Cyber Security Controls Assessor III for a remote, four-month engagement (CA- domiciled). The role focuses on assessing and validating cybersecurity controls across IT, OT/ICS, and cloud environments to safeguard energy infrastructure.

The ideal candidate has 5+ years in security controls assessment, familiarity with NIST CSF/800-53, CIS Controls, and regulatory compliance, and strong communication and documentation skills.