Security Assessment Lead — Controls, Risk & Compliance

Guidehouse; Tysons (VA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

Parental Leave and Adoption Support

401(k) Retirement Plan

Life Insurance and Disability

Job summary

Guidehouse in Tysons, VA is looking for a Security Assessment Lead to drive security and privacy control assessments for public-sector and regulated environments. You will provide technical leadership, oversight, and day-to-day supervision of assessment teams.

You will guide development of SSPs, SARs, ISRAs, and POA&Ms, mentor staff, and advance standardized methodologies, automation, and evidence validation to improve client security postures.

Qualifications

• Minimum of five (5) years of professional experience in cybersecurity, information security, or technology risk.
• Experience leading or supervising security assessor teams or related personnel for at least 3 years.
• Hands-on experience developing and/or reviewing SSPs, SARs, POA&Ms, ISRAs, or equivalent artifacts.

Responsibilities

• Lead security and privacy control assessments in accordance with plans, standards, and client requirements.
• Supervise assessment teams, including assigning activities, reviewing work, QA, and coaching.
• Manage assessment planning, execution, and reporting across systems or workstreams.
• Review evidence to evaluate design, implementation, and effectiveness of controls.
• Articulate deficiencies, risks, and remediation clearly to technical and executive audiences.
• Mentor junior staff and promote consistent assessment methodologies and quality.

Skills

Security leadership

Security assessments

Risk management

Client engagement

Communication

Education

Bachelor's Degree

Tools

SSP templates

Job description

Guidehouse in Tysons, VA is looking for a Security Assessment Lead to drive security and privacy control assessments for public-sector and regulated environments. You will provide technical leadership, oversight, and day-to-day supervision of assessment teams.

You will guide development of SSPs, SARs, ISRAs, and POA&Ms, mentor staff, and advance standardized methodologies, automation, and evidence validation to improve client security postures.