Security Assessor/Analyst Lead
Core
Lead security and privacy control assessments for public-sector and regulated environments, providing technical leadership and quality oversight of assessment teams.
Role type
Senior IC security assessment lead (consulting)
Builds
Security Assessment Reports (SARs), System Security Plans (SSPs), Independent Security Risk Assessments (ISRAs), Plans of Action and Milestones (POA&Ms)
Domain
Public sector / Regulated industries / Cybersecurity compliance
Required skills
Security control assessment, Risk assessment, Audit, NIST SP 800-53, Team leadership, Documentation review, Technical evidence evaluation, Stakeholder engagement, Remediation planning, Quality assurance
Preferred skills
A&A, RMF, SCA, Cloud security, IAM, Automation, Data analytics, GRC platforms, Proposal development
Technologies
NIST SP 800-53, SSPs, SARs, ISRAs, POA&Ms, GRC platforms, Cloud platforms, IAM solutions
Responsibilities
Lead security and privacy control assessments in accordance with established plans and standards. Supervise and provide day-to-day direction to teams of security assessors. Review security documentation and technical evidence to evaluate control effectiveness. Lead the development and quality review of assessment artifacts. Clearly articulate control deficiencies and risks to technical and executive audiences. Mentor and develop junior and mid-level security professionals.
Seniority
Senior, hands-on IC with leadership
