Security Assessment Lead — Risk & Compliance Expert

Guidehouse; McLean (VA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

Paid Holidays

Employee Wellness Programs

Job summary

Guidehouse is seeking a Security Assessor/Analyst Lead in McLean, VA, to guide security and privacy control assessments for public-sector and regulated environments. You will supervise assessors, review artifacts, and drive high-quality documentation while maturing assessment capabilities with standardized methods and automation.

You will engage with client stakeholders, translate complex issues into actionable findings, and help develop junior staff, contributing to a resilient security program

Qualifications

• Minimum of five years of professional experience in cybersecurity, information security, or related fields.
• Three years of supervisory or team leadership experience.
• Hands-on experience developing and reviewing security assessment documentation (SSPs, SARs, POA&Ms, ISRAs).

Responsibilities

• Lead security and privacy control assessments per plans, standards, and client requirements.
• Supervise assessment teams with coaching, QA, and professional development.
• Oversee planning, execution, documentation, and reporting across multiple systems or stakeholders.
• Review evidence to evaluate design, implementation, and effectiveness of controls.
• Articulate deficiencies and remediation recommendations to technical and executive audiences.

Skills

Leadership

Strategic thinking

Communication

Risk assessment

Project management

Education

Bachelor's Degree

Tools

NIST SP 800-53

A&A/RMF concepts

Job description

Guidehouse is seeking a Security Assessor/Analyst Lead in McLean, VA, to guide security and privacy control assessments for public-sector and regulated environments. You will supervise assessors, review artifacts, and drive high-quality documentation while maturing assessment capabilities with standardized methods and automation.

You will engage with client stakeholders, translate complex issues into actionable findings, and help develop junior staff, contributing to a resilient security program