Security Control Assessor: Risk & Compliance Leader (Hybrid VA)

Delphi-US, LLC - Peacemakers in the Talent War; Richmond (VA); Hybrid; USD 76,000 - 90,000; Full time

Job summary

Delphi-US is seeking a Security Control Assessor in a hybrid Richmond, VA role with hourly pay range. You will evaluate information systems and security controls, identify risks, and provide strategic recommendations to improve SAFR compliance and security posture.

You will review data, advise stakeholders, and collaborate across teams to implement controls, foster risk mitigation, and support continuous monitoring and policy improvements.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• 3–5+ years of security assessment, cybersecurity, or compliance experience.
• Experience conducting security assessments and evaluating controls.
• Knowledge of NIST SP 800-37 and 800-53/53A.
• Experience advising on compliance requirements and best practices.

Responsibilities

• Conduct comprehensive assessments of information security controls, policies, and procedures to identify risks and gaps.
• Review assessment data and advise stakeholders on SAFR requirements and remediation strategies.
• Evaluate and prioritize security risks and recommend enhancements to strengthen posture.
• Support development and integration of new security processes with existing frameworks.
• Communicate policy and security updates to stakeholders and clients.
• Build collaborative relationships to influence security outcomes.

Skills

Security assessments

NIST SP 800-37/53/53A

Risk management

Policy & procedures review

Stakeholder collaboration

Education

Bachelor’s degree in Computer Science/Information Security/Cybersecurity or related field

Job description

Delphi-US is seeking a Security Control Assessor in a hybrid Richmond, VA role with hourly pay range. You will evaluate information systems and security controls, identify risks, and provide strategic recommendations to improve SAFR compliance and security posture.

You will review data, advise stakeholders, and collaborate across teams to implement controls, foster risk mitigation, and support continuous monitoring and policy improvements.