Security Control Assessor Apprentice

CITADEL Pacific Ltd.; Tamuning (GU); On-site; USD 31,000 - 42,000; Full time

Job summary

Citadel Pacific Ltd. in Guam seeks an Security Control Assessor Apprentice to join our cybersecurity and compliance team.

This entry-level, structured training role supports security documentation, recordkeeping, evidence collection, and basic security checks under supervision. You will gain hands-on exposure to security controls, policies, vulnerability management, audit readiness, incident documentation, and security awareness training while working 40 hours per week.

Qualifications

• High school diploma or equivalent required.
• Must be a US citizen or resident alien.
• Must be at least 18 years of age or older.
• Must be a resident of Guam for a period not less than three consecutive years before entry into the program.
• Mayor's Verification must be submitted upon hire.
• Attend a minimum of two classes per semester while working 40 hours per week with IT&E.

Responsibilities

• Know and uphold IT&E mission, policies and procedures, and safety programs.
• Assist senior staff with security control reviews using checklists and procedures.
• Collect, organize, and maintain documentation and evidence for reviews and audits.
• Record preliminary observations and potential findings for review by seniors.
• Maintain cybersecurity and compliance records, trackers, and audit files.
• Support tracking of open findings and corrective actions; escalate overdue items.
• Learn to use approved cybersecurity tools and assist with basic scans and reporting under supervision.
• Securely maintain scan results and report concerns to senior staff.
• Assist with maintaining cybersecurity policies and documentation, including updates and approvals.
• Support incident documentation by maintaining records and follow-up actions; report suspected incidents.
• Assist with cybersecurity awareness efforts and training tracking.
• Participate in apprenticeship training covering terminology, controls, and standards (NIST, CMMC, etc.).
• Maintain confidentiality of information and complete on-the-job learning requirements.

Skills

Microsoft Office

Written communication

Organizing records

Attention to detail

Team collaboration

Basic cybersecurity concepts

Time management

Learning aptitude

Education

High School diploma or equivalent

Tools

Microsoft Outlook

Excel

Word

PowerPoint

Job description

Job Summary:

The Security Control Assessor Apprentice is an entry-level, structured training position that supports the cybersecurity and compliance team with security documentation, recordkeeping, evidence collection, basic security checks, and administrative coordination.

Under the direct supervision of experienced cybersecurity and compliance staff, the Apprentice will gain practical experience with security controls, policies, vulnerability management, audit readiness, incident documentation, and employee security awareness. The Apprentice is not expected or authorized to independently perform security assessments, make compliance determinations, approve remediation actions, or lead security incident investigations.

Essential Duties and Responsibilities:

1. Know and uphold established IT&E Mission, policies and procedures, departmental and divisional objectives, quality assurance standards, security requirements, and safety programs.
2. Assist senior staff with security control reviews by following established checklists and procedures.
3. Collect, organize, and maintain documentation, screenshots, reports, system-generated evidence, and other information needed for security reviews, audits, and compliance activities.
4. Record preliminary observations, missing information, and potential findings for review by senior cybersecurity or compliance staff.
5. Maintain accurate cybersecurity and compliance records, including spreadsheets, trackers, checklists, policy records, audit files, and corrective-action logs.
6. Assist with tracking open security findings, assigned corrective actions, target completion dates, and supporting documentation; promptly elevate overdue or missing items to the appropriate supervisor.
7. Learn to use approved cybersecurity tools and assist with basic vulnerability scans, security checks, and reporting activities under direct supervision.
8. Save, organize, and securely maintain scan results and related evidence; report identified concerns to senior staff for review and direction.
9. Assist with the maintenance of cybersecurity policies, procedures, standards, and related documentation, including tracking updates, approvals, and distribution of approved materials.
10. Support security incident documentation by maintaining incident records, organizing supporting materials, documenting assigned meeting notes, and tracking follow-up actions. The Apprentice will immediately report suspected incidents or unusual activity to senior staff and will not independently investigate or resolve incidents.
11. Assist with cybersecurity awareness efforts by preparing approved awareness materials, tracking employee training completion, sending reminders, and maintaining training records.
12. Participate in assigned cybersecurity, compliance, and apprenticeship-related training, including instruction on cybersecurity terminology, security controls, documentation practices, and relevant standards and frameworks such as NIST, CMMC, and other requirements applicable to IT&E.
13. Maintain the confidentiality and secure handling of company, customer, employee, system, and security-related information at all times.
14. Complete assigned on-the-job learning requirements, related instruction, progress reviews, and competency assessments in accordance with the apprenticeship program.
15. Perform other apprentice-level duties and responsibilities as assigned or required.

Minimum Educational and Work Experience Requirements:

Education: High school diploma or equivalent required.

Work Experience: No previous cybersecurity experience required. Previous experience with computers, office applications, IT support, or administrative work is helpful but not required.

Required Qualifications, Capabilities, And Skills:

• Must provide a High School diploma or equivalent.
• Must be a US citizen or resident alien.
• Must be at least 18 years of age or older.
• Must be a resident of Guam for a period not less than three (3) consecutive years before entry into the program.
• Mayor's Verification must be submitted upon hire.
• Must be able to attend a minimum of two (2) classes per semester as identified by program coordinator, while working forty (40) hours per week with IT&E.

Licensure/Certification/Professional Association:

No certifications required.

Entry-level IT or cybersecurity certifications are a plus but are not required.

Special Knowledge, Skills, and Abilities:

Knowledge of:

• Basic computer operations, file management, and office procedures.
• Microsoft Office applications, including Outlook, Word, Excel, and PowerPoint.
• Basic cybersecurity concepts and terminology, or the ability to learn them.

Skills in:

• Organizing files, records, and detailed information.
• Preparing clear and accurate written notes, trackers, and reports.
• Following established procedures and checklists.
• Managing assigned tasks, priorities, and deadlines.
• Working collaboratively with employees across departments.

Ability to:

• Communicate clearly, professionally, and accurately, both verbally and in writing.
• Learn and apply cybersecurity policies, procedures, and technical concepts.
• Exercise sound judgment and promptly elevate concerns to senior staff.
• Handle confidential and sensitive information responsibly.
• Work independently on assigned tasks while accepting supervision, feedback, and direction.
• Maintain attention to detail while managing multiple assignments.