Security Controls Evaluator & Risk Advisor

Apex Systems; Richmond (VA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

ESPP and other benefits

Job summary

Everforth Apex Systems in Richmond, VA is seeking a Security Controls Assessor to evaluate information systems, controls, and processes for risks and compliance gaps. You will lead assessments, review documentation, and provide actionable recommendations to strengthen risk management practices.

The role requires 3–5+ years in information security, familiarity with NIST/ISO 27001, and strong written and verbal communication to convey findings to technical and non-technical audiences.

Qualifications

• Bachelor's degree in information security, CS, IT, or equivalent.
• 3–5+ years in information security, risk management, audit, or compliance.
• Experience conducting security assessments and using security frameworks.
• Familiarity with NIST, ISO 27001, CIS Controls, or similar.
• Strong written, verbal, and presentation communication skills.
• Experience collaborating across technical and business teams.

Responsibilities

• Conduct assessments of security controls to identify risks, vulnerabilities, and control deficiencies.
• Review and validate policies, procedures, technical documentation, and control evidence.
• Document findings, recommendations, and risk observations.
• Utilize automated evidence collection, monitoring solutions, and reporting tools to support assessment activities.
• Analyze large and complex datasets to identify trends, anomalies, and recurring control issues.
• Apply consistent assessment methodologies and risk evaluation practices.
• Evaluate controls against internal requirements, regulatory expectations, and industry security frameworks.

Skills

Security assessments

Risk management

Policy review

Cross-functional collaboration

Communication

Education

Bachelor's degree in Information Security, CS, IT or related

Tools

Monitoring tools

Automation tooling

Job description

Everforth Apex Systems in Richmond, VA is seeking a Security Controls Assessor to evaluate information systems, controls, and processes for risks and compliance gaps. You will lead assessments, review documentation, and provide actionable recommendations to strengthen risk management practices.

The role requires 3–5+ years in information security, familiarity with NIST/ISO 27001, and strong written and verbal communication to convey findings to technical and non-technical audiences.