Senior Security Risk Assessor, Remote (TPRM)

Fortress Information Security; Orlando (FL); Remote; USD 68,000 - 94,000; Full time

Benefits offered by this job

Remote and Hybrid working environment

Competitive pay structure

Medical, dental, vision plans

Company paid life, short- and long‑t​e

Disability insurance

Employee Assistance Program

401(k) match

Flexible Paid Time Off

Parental Leave

Professional growth opportunities

Tuition and certification reimbursemen

Job summary

Fortress Information Security is seeking a Senior Security Risk Assessor to independently review security assessments and oversee junior staff. You will manage third-party risk reviews, coordinate remediation activities, and apply your knowledge of frameworks such as NIST and ISO 27001 in a remote-capable US team environment.

The role emphasizes strong communication with clients, adherence to SLAs, and the ability to work with various stakeholders while enabling effective risk mitigation across

Qualifications

• Minimum 2+ years in cybersecurity control reviews, risk management or related fields.
• Experience in a customer-facing environment.
• Experience in highly regulated industries (financial services, energy, healthcare).
• Solid understanding of risk management concepts around information security and IT general controls.
• Familiarity with information security frameworks (NIST 800-53, NIST CSF, ISO 27001).
• Strong attention to detail, judgment, and ability to follow scripts and meet deadlines.
• Proven professional communication and client-relations skills.
• Proficient with Microsoft Office and Google products; able to use other business software.
• Ability to leverage AI tools and refine prompts to improve work output.
• Ambition, drive, and a positive attitude.

Responsibilities

• Deliver workload on time following service level agreements and using appropriate tools and standards.
• Work independently while representing the services with professionalism.
• Collaborate with internal partners and third parties to mitigate third party risks.
• Represent Fortress as a primary contact to clients and their vendors.
• Execute the Validated Controls Assessment (VCA) workflow for assigned clients.
• Perform remediation reviews, coordinate plans with vendors, and review evidence for closure of findings.
• Support managers and account leaders with account management tasks as needed.
• Other duties as assigned.

Skills

Cybersecurity control reviews

Operations risk management

Information security

Crisis management

Security standards/assessments

Risk management concepts

NIST 800-53

NIST CSF

ISO 27001

Attention to detail

Professional communication

Microsoft Office

Google Workspace

AI tooling and prompts

Ambition and drive

Education

Associates degree

Bachelor's degree

Tools

Microsoft Office Suite

Google Workspace

Job description

Fortress Information Security is seeking a Senior Security Risk Assessor to independently review security assessments and oversee junior staff. You will manage third-party risk reviews, coordinate remediation activities, and apply your knowledge of frameworks such as NIST and ISO 27001 in a remote-capable US team environment.

The role emphasizes strong communication with clients, adherence to SLAs, and the ability to work with various stakeholders while enabling effective risk mitigation across