Security Control Assessor — Compliance & Risk Specialist

Cymertek Corporation; Aurora (CO); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Excellent Salaries

Flexible Work Schedule

Medical/Dental/Vision - 100% employee?

Job summary

Cymertek Corporation is seeking a meticulous Security Control Assessor (SCA) to join our team in Aurora, CO. You will evaluate the effectiveness of security controls across information systems, conduct testing and audits, and identify vulnerabilities while collaborating with IT and security teams to strengthen protective measures.

The ideal candidate will have strong analytical skills, experience with security frameworks (NIST/ISO 27001), and a focus on regulatory compliance (HIPAA, GDPR).

Qualifications

• Proficiency with security frameworks (NIST/ISO 27001) and control testing.
• Experience conducting security audits and risk assessments.
• Knowledge of regulatory requirements (HIPAA, GDPR) and their impact on systems.
• Ability to interpret security policies and apply them to environments.

Responsibilities

• Assess the effectiveness of security controls in information systems.
• Conduct security control testing and evaluations.
• Identify security gaps and vulnerabilities in systems.
• Collaborate with cross-functional teams to review and implement controls.
• Ensure compliance with industry standards and regulations (NIST, FISMA).
• Provide detailed reports with findings and remediation recommendations.

Skills

NIST/ISO 27001 knowledge

Security control testing

Audits & risk assessments

Regulatory compliance (HIPAA/GDPR)

Policy interpretation

Vulnerability scanning

Education

Bachelor's Degree

Tools

SIEM

Vulnerability scanning tools

Job description

Cymertek Corporation is seeking a meticulous Security Control Assessor (SCA) to join our team in Aurora, CO. You will evaluate the effectiveness of security controls across information systems, conduct testing and audits, and identify vulnerabilities while collaborating with IT and security teams to strengthen protective measures.

The ideal candidate will have strong analytical skills, experience with security frameworks (NIST/ISO 27001), and a focus on regulatory compliance (HIPAA, GDPR).