Security Control Assessor – Hybrid | Risk & Compliance

Stefanini North America and APAC; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Stefanini North America and APAC is seeking a Security Control Assessor for a hybrid role based in Richmond, VA. The ideal candidate will evaluate information security controls, review policies and procedures, and advise on SAFR requirements to strengthen security posture.

Travel and occasional extended hours may be required. Requirements include a bachelor's degree in computer science or information security and 3–5+ years of relevant experience, with certifications such as CISSP, CISA, or CISM

Qualifications

• Bachelor's degree in computer science, Information Security, or equivalent experience.
• 3–5+ years of relevant work experience.
• Proven experience with conducting security assessments.
• Knowledge of compliance frameworks and continuous authorization processes (NIST SP800-37, SP800-53/53a).
• Excellent communication skills and ability to work collaboratively.

Responsibilities

• Conduct thorough evaluations of information security controls to identify threats and vulnerabilities to the Systems information systems.
• Review security controls, policies, and procedures to prioritize risks and recommend enhancements.
• Advise districts on SAFR requirements and best practices based on data review.
• Participate in project development around new processes and communicate changes to clients and resources.
• Perform other related duties as assigned.

Skills

Security assessments

Communication

Risk management

Collaboration

SAFR knowledge

Education

Bachelor's degree in computer science or information security

Job description

Stefanini North America and APAC is seeking a Security Control Assessor for a hybrid role based in Richmond, VA. The ideal candidate will evaluate information security controls, review policies and procedures, and advise on SAFR requirements to strengthen security posture.

Travel and occasional extended hours may be required. Requirements include a bachelor's degree in computer science or information security and 3–5+ years of relevant experience, with certifications such as CISSP, CISA, or CISM