Security Control Assessor

Delphi-US, LLC - Peacemakers in the Talent War; Richmond (VA); Hybrid; USD 76,000 - 90,000; Full time

Job summary

Delphi-US is seeking a Security Control Assessor in a hybrid Richmond, VA role with hourly pay range. You will evaluate information systems and security controls, identify risks, and provide strategic recommendations to improve SAFR compliance and security posture.

You will review data, advise stakeholders, and collaborate across teams to implement controls, foster risk mitigation, and support continuous monitoring and policy improvements.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• 3–5+ years of security assessment, cybersecurity, or compliance experience.
• Experience conducting security assessments and evaluating controls.
• Knowledge of NIST SP 800-37 and 800-53/53A.
• Experience advising on compliance requirements and best practices.

Responsibilities

• Conduct comprehensive assessments of information security controls, policies, and procedures to identify risks and gaps.
• Review assessment data and advise stakeholders on SAFR requirements and remediation strategies.
• Evaluate and prioritize security risks and recommend enhancements to strengthen posture.
• Support development and integration of new security processes with existing frameworks.
• Communicate policy and security updates to stakeholders and clients.
• Build collaborative relationships to influence security outcomes.

Skills

Security assessments

NIST SP 800-37/53/53A

Risk management

Policy & procedures review

Stakeholder collaboration

Education

Bachelor’s degree in Computer Science/Information Security/Cybersecurity or related field

Job description

Security Control Assessor | Location: Hybrid, Richmond, VA | Contract | Hourly Pay Range $55-$65

The Security Control Assessor will evaluate information systems and security controls to identify risks, vulnerabilities, and compliance gaps. This role involves conducting security assessments, reviewing policies and procedures, and providing strategic recommendations to enhance security posture and ensure compliance with SAFR requirements and established security standards. The assessor will also advise stakeholders on security best practices, risk mitigation strategies, and security improvements.

Key Responsibilities

• Conduct comprehensive assessments of information security controls, policies, and procedures to identify risks, vulnerabilities, and compliance gaps.
• Review assessment data and advise stakeholders on SAFR requirements, security best practices, and remediation strategies.
• Evaluate and prioritize security risks, recommending enhancements to strengthen the organization’s security posture.
• Support the development and integration of new security processes with existing frameworks.
• Communicate policy, process, and security updates effectively to impacted stakeholders and clients.
• Build collaborative relationships with stakeholders, influencing security outcomes through consultative engagement.
• Apply risk management principles when evaluating security controls and making strategic recommendations.
• Participate in projects involving security process development, implementation, and integration.
• Perform other related duties as assigned.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience.
• 3–5+ years of relevant experience in security assessment, cybersecurity, or compliance.
• Proven experience conducting security assessments and evaluating security controls.
• Knowledge of security frameworks and continuous authorization processes, including NIST SP 800-37 and NIST SP 800-53/53A.
• Experience reviewing security data and advising on compliance requirements and best practices.
• Strong understanding of risk management principles and their application to security decisions.
• Excellent written and verbal communication skills, with the ability to collaborate across technical and business teams.
• Strong analytical, problem-solving, and negotiation skills.
• Attention to detail and the ability to evaluate complex information to develop practical recommendations.
• Ability to build effective relationships and communicate security requirements clearly to diverse stakeholders.

Preferred Qualifications

• Professional certifications such as CISSP, CISA, or CISM.
• Experience working in policy, security assurance, regulatory, or quasi-governmental environments.
• Familiarity with cloud security challenges and cloud service providers.
• Knowledge of SAFR lifecycle compliance, assessment, and testing.
• Experience supporting security policies, controls, and processes across complex organizations.
• Familiarity with continuous monitoring, authorization, and risk management processes.

About Delphi-US

Delphi-US is a national IT Services firm based in Newport, Rhode Island. Delphi attracts our nation's best and brightest Technical & Professional Talent and positions our nation's finest employers to further their competitive advantages. Delphi's core technical focus includes Data Intelligence Engineering & Analytics, AI/ML Operational Excellence, DevOps & Cloud Computing, Health IT & Life Sciences, and Energy Management/Power Systems; serving domains from sensitive national energy sectors to critical financial services, biomed, life sciences & pharma, major government & municipal institutions, and much of the USA's Fortune 500 corporations. Delphi Associates are deployed on critical IT Projects where their consultative business acumen, comprehensive technical expertise, and committed service mission drives our client's success. Our proprietary skill-based and cultural matching process results in higher qualified project teams, custom curated for our client's specific technical & functional goals. We are supremely experienced, friendly, professional, and ready to advocate on your behalf. Delphi has an indelible understanding of employer expectations, a track record of project success and we deliver lasting results.