Remote Senior Security Risk Assessor (TPRM)

Fortress Information Security; Florida; Remote; USD 68,000 - 94,000; Full time

Benefits offered by this job

Remote/Hybrid work

Competitive pay

Health plans 90% cover

Life insurance

Disability insurance

EAP

401(k) match

Flexible PTO

Parental leave

Tuition reimbursement

Employee referrals

Company events

Job summary

Fortress Information Security is seeking a Senior Security Risk Assessor to review cyber risk assessments and guide junior staff in a remote, US-based role. Focus is on independent work, adherence to SLAs, and collaboration with clients and third parties to mitigate risks.

Ideal candidates have 2+ years in cybersecurity control reviews, familiarity with NIST CSF/ISO 27001, and strong communication skills. Remote/hybrid options and competitive benefits are offered.

Qualifications

• Minimum 2 years of cybersecurity control reviews or risk management experience.
• Experience in a customer-facing environment.
• Familiar with regulated industries (financial services, healthcare, energy).
• Understanding of NIST CSF / ISO 27001.
• Strong communication and documentation skills.

Responsibilities

• Review security assessments in line with SLAs and quality standards.
• Guide less experienced staff and ensure work quality.
• Collaborate with internal partners and third parties on third-party risks.
• Be Fortress’s primary client contact and liaise with vendors.
• Execute the VCA workflow for assigned clients.
• Perform remediation reviews and coordinate closure plans with vendors.
• Support account management activities as needed.
• Perform other duties as assigned.

Skills

Cybersecurity risk assessment

Risk management

NIST 800-53

Client communication

Regulated industries

IT general controls

Education

Associate degree

Bachelor’s degree preferred

Tools

Microsoft Office

Google Workspace

AI tools prompts

Job description

Fortress Information Security is seeking a Senior Security Risk Assessor to review cyber risk assessments and guide junior staff in a remote, US-based role. Focus is on independent work, adherence to SLAs, and collaboration with clients and third parties to mitigate risks.

Ideal candidates have 2+ years in cybersecurity control reviews, familiarity with NIST CSF/ISO 27001, and strong communication skills. Remote/hybrid options and competitive benefits are offered.