Security Assessment Lead: Drive Controls, Compliance & Reporting

Guidehouse; Arlington (VA); Presencial; USD 130.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical Insurance

401(k) Plan

Tuition Reimbursement

Mobility Stipend

Paid Holidays

Descripción de la vacante

Guidehouse is seeking a Security Assessment Lead to direct and mature security control assessments for public-sector and regulated environments. You will supervise assessment teams, validate evidence, and deliver high-quality documentation while advising clients on risks and remediation options.

You will drive standardized methodologies, automation, and capability development across assessment teams, engaging with senior client stakeholders to translate complex issues into clear findings and

Formación

• Minimum of five (5) years of professional experience.
• Experience in cybersecurity, information security, technology risk, audit, security control assessment, authorization, or related disciplines.
• Minimum of three (3) years of supervisory or team leadership experience.
• Demonstrated experience leading or performing security control assessments, audits, risk assessments, or authorization activities.
• Hands-on experience developing and/or reviewing formal security assessment documentation, including SSPs, SARs, POA&Ms, ISRAs, or equivalent artifacts.
• Strong working knowledge of NIST SP 800-53 security and privacy controls and risk-based assessment concepts.
• Experience evaluating technical and procedural evidence to determine control effectiveness and identify security or compliance gaps.
• Experience leading interviews, assessment discussions, and working sessions with technical personnel, system owners, security teams, and other client stakeholders.
• Ability to translate complex technical and security issues into clear, concise, and defensible findings and recommendations.
• Demonstrated experience reviewing the work of other assessors and maintaining quality and consistency across assessment deliverables.
• Strong written and verbal communication skills, including the ability to communicate effectively with technical and senior client stakeholders.
• Ability to manage multiple assessment activities, priorities, and deliverables in a client-service environment.

Responsabilidades

• Lead security and privacy control assessments in accordance with established assessment plans and client requirements.
• Supervise and provide day-to-day direction to teams of security assessors, including assignment of activities and quality assurance.
• Lead assessment planning, execution, documentation, and reporting across multiple systems or stakeholders.
• Review security documentation and evidence to evaluate control design and operating effectiveness.
• Lead and participate in validation activities including evidence inspection and interviews.
• Develop and quality-review assessment artifacts (SSPs, SARs, ISRA, POA&Ms).
• Clearly articulate deficiencies, risks, and remediation options to technical and executive audiences.
• Maintain assessment independence, objectivity, and professional judgment.
• Serve as trusted advisor to client stakeholders on results and risk implications.
• Establish consistent methodologies, templates, and best practices across teams.
• Identify opportunities to improve efficiency through standardization, tooling, and automation.
• Support data analytics and AI-assisted techniques to improve analysis and reporting.
• Mentor junior and mid-level security professionals.

Conocimientos

5+ years experience

Cybersecurity experience

Team leadership

Security assessments

SSP/SAR review

NIST 800-53

Evidence analysis

Stakeholder interviews

Communication

Quality review

Project management

Educación

Bachelor's Degree

Descripción del empleo

Guidehouse is seeking a Security Assessment Lead to direct and mature security control assessments for public-sector and regulated environments. You will supervise assessment teams, validate evidence, and deliver high-quality documentation while advising clients on risks and remediation options.

You will drive standardized methodologies, automation, and capability development across assessment teams, engaging with senior client stakeholders to translate complex issues into clear findings and