Security Assessor: AI‑Driven Compliance & Risk

Guidehouse; Tysons (VA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

401(k) Retirement Plan

Parental Leave and Adoption Assistance

Mobility Stipend

Job summary

Guidehouse is seeking a Security Assessor to support security and privacy control assessments for public-sector systems. You will evaluate control effectiveness, validate evidence, and contribute to formal assessment documentation under guidance from a Senior Security Assessor.

This role emphasizes assessment execution and documentation, with exposure to security engineering and AI-enabled compliance approaches.

Qualifications

• Minimum of three years of experience in security control assessments or related activities.
• Bachelor's degree from an accredited university.
• US Citizenship is contractually required.
• Hands-on experience contributing to formal security assessment documentation (SSPs, SARs, POA&Ms).
• Working knowledge of NIST SP 800-53 security and privacy controls.
• Ability to analyze assessment evidence and clearly document findings.

Responsibilities

• Perform security and privacy control assessments in accordance with established assessment plans.
• Review security documentation and technical evidence.
• Validate control implementation through evidence inspection.
• Architecture and system documentation review.
• Interviews with system owners and technical staff.
• Contribute to assessment artifacts, including SSP updates, SARs, ISRAs, POA&Ms.
• Document assessment results and clearly articulate control gaps and risks.
• Identify opportunities to improve assessment efficiency through standardization, tooling, or automation.
• Support the use of data-driven or AI-assisted techniques to enhance analysis, traceability, and reporting.

Skills

Security assessments

Audit support

Risk-based assessment

Education

Bachelor's degree

Tools

NIST SP 800-53

Job description

Guidehouse is seeking a Security Assessor to support security and privacy control assessments for public-sector systems. You will evaluate control effectiveness, validate evidence, and contribute to formal assessment documentation under guidance from a Senior Security Assessor.

This role emphasizes assessment execution and documentation, with exposure to security engineering and AI-enabled compliance approaches.