ZipRecruiter

Log In

2

Entry Level Security Controls Assessor Jobs (NOW HIRING)

Oneida Technical Solutions

$100K - $120K/yr

OTS is seeking a Security Controls Assessor in providing cybersecurity support to AFCENT - this role is onsite at Shaw AFB in Sumter, SC.In this role you will perform comprehensive IT security ...

Oneida Technical Solutions

$100K - $120K/yr

OTS is seeking a Security Controls Assessor in providing cybersecurity support to AFCENT - this role is onsite at Shaw AFB in Sumter, SC. In this role you will perform comprehensive IT security ...

Guidehouse

Security Assessor

Mclean, VA

Working knowledge of NIST SP 80053 security and privacy controls * Understanding of riskbased assessment concepts * Ability to analyze assessment evidence and clearly document findings What Would Be ...

Guidehouse

Security Assessor

Mclean, VA · On-site

Working knowledge of NIST SP 800-53 security and privacy controls * Understanding of risk-based assessment concepts * Ability to analyze assessment evidence and clearly document findings What Would ...

next page

Showing results 1-20

All JobsReal Estate JobsSecurity JobsEntry Level Security Controls Assessor Jobs

Entry Level Security Controls Assessor information

See salary details

$8

$58

$78

How much do entry level security controls assessor jobs pay per hour?

As of Aug 21, 2026, the average hourly pay for entry level security controls assessor in the United States is $58.77, according to ZipRecruiter salary data. Most workers in this role earn between $50.48 and $68.03 per hour, depending on experience, location, and employer.

What is an entry level security controls assessor?

Entry Level Security Controls Assessors are professionals who help organizations evaluate and maintain their security controls to ensure compliance with relevant standards and regulations. They typically assist with reviewing security policies, conducting risk assessments, and verifying that technical and administrative safeguards are in place. This role is often an introduction to cyber risk management and compliance, providing foundational experience in identifying vulnerabilities and supporting remediation efforts. Entry level assessors usually work under the supervision of more experienced security professionals and may support audits, documentation, and reporting tasks.

What are the key skills and qualifications needed to thrive as an entry level security controls assessor?

To thrive as an Entry Level Security Controls Assessor, you typically need foundational knowledge of cybersecurity principles, risk management frameworks, and a relevant degree such as in information technology or cybersecurity. Familiarity with tools like NIST SP 800-53, vulnerability scanners, and compliance management systems, as well as certifications such as CompTIA Security+ or CAP, are often expected. Strong analytical thinking, attention to detail, and clear written and verbal communication skills help you excel in performing assessments and documenting findings. These skills and qualifications are crucial for accurately evaluating security controls, ensuring regulatory compliance, and effectively communicating risks and recommendations to stakeholders.

What are some common challenges faced by entry level security controls assessors during their initial projects?

Entry level Security Controls Assessors often encounter challenges such as quickly learning to interpret complex regulatory frameworks (like NIST or FedRAMP), understanding the technical environment of the organization, and effectively communicating findings to both technical and non-technical stakeholders. Adapting to varying documentation standards and balancing multiple concurrent assessments can also be demanding. However, these challenges provide valuable learning opportunities and are typically supported by mentorship from senior team members and structured onboarding processes.

What is the difference between Entry Level Security Controls Assessor vs Security Analyst?

AspectEntry Level Security Controls AssessorSecurity Analyst
CertificationsCompTIA Security+, CISSP (entry-level), Security+CompTIA Security+, CISSP (entry-level), Security+
Work EnvironmentAudit and compliance settings, government agencies, consulting firmsIT departments, cybersecurity teams, corporate environments
Primary FocusAssessing security controls, compliance checks, vulnerability identificationMonitoring security, incident response, threat analysis

While both roles involve cybersecurity fundamentals, the Entry Level Security Controls Assessor primarily focuses on evaluating security controls and ensuring compliance, often in audit or assessment settings. In contrast, a Security Analyst concentrates on monitoring security systems, analyzing threats, and responding to incidents within an organization. Both roles require similar certifications and work environments but differ in their core responsibilities and daily tasks.

More about Entry Level Security Controls Assessor jobs

What cities are hiring for Entry Level Security Controls Assessor jobs?

Cities with the most Entry Level Security Controls Assessor job openings:

What are the most commonly searched types of Security Controls Assessor jobs?

The most popular types of Security Controls Assessor jobs are:

What states have the most Entry Level Security Controls Assessor jobs?

States with the most job openings for Entry Level Security Controls Assessor jobs include:

What job categories do people searching Entry Level Security Controls Assessor jobs look for?

The top searched job categories for Entry Level Security Controls Assessor jobs are:

Entry Level Security Controls Assessor jobs near you
Infographic showing various Entry Level Security Controls Assessor job openings in the United States as of August 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $122,236 per year, or $58.8 per hour.

Security Controls Assessor

Oneida Technical Solutions

Sumter, SC • On-site

Full-time

Posted 17 days ago

Job description

Oneida Technical Solutions, LLC (OTS), was founded in 2014 and quickly established itself as a reliable partner capable of providing a variety of information technology and cyber solutions across highly complex, highly regulated and highly secure environments, including the U.S. Department of Defense (DoD), healthcare, higher education, law enforcement, retail, casino gaming and more.
Our innovative cyber capabilities and programs have made us trusted partners for IT modernization projects, implementing upgrades and accelerating the delivery of new solutions for the DoD and commercial industries with consumer-driven technology.
OTS is seeking a Security Controls Assessor in providing cybersecurity support to AFCENT - this role is onsite at Shaw AFB in Sumter, SC.
In this role you will perform comprehensive IT security control assessments on AFCENT systems and software applications. Assessments shall require physical travel to various contractor and Government sites inside and outside the continental United States (CONUS and OCONUS). Assessments shall determine the condition of the management, operational, and technical security controls employed within or inherited by an information system or software to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system).
Duties for this role include, but are not limited to:
Perform initial and continual security control assessment and validation for AFCENT networks, systems, and software applications.
Utilize DOD approved tools such as, but not limited to - Assured Compliance Assessment Solution (ACAS), Nessus, Host Based Security Systems (HBSS), Continuous Monitoring Risk Scoring (CMRS), Online Compliance Reporting System (OCRS), and SolarWinds - to generate initial and continuous monitoring reports.
Complete reports to support risk decisions from the AO, both as required and as requested.
Provide an assessment on the severity of weaknesses or deficiencies discovered in the information system or software application and its environment of operation and recommend corrective actions to address identified vulnerabilities.
Review the System Security Plan (SSP), prior to initiating the security control assessment and ensure the plan provides a set of security controls for the information system or software application that meet the stated security requirements.
Advise the Information System Owner (ISO) concerning the impact values for confidentiality, integrity, and availability for the information on a system or software application.
Evaluate threats and vulnerabilities to information systems or software application to ascertain the need for additional safeguards.
Assist in creating, reviewing, and approving the information system or software application security assessment plan, which is comprised of the SSP, the Security Controls Traceability Matrix (SCTM), and the Security Control Assessment Procedure.
Ensure security control assessments are completed for each information system or software application and ensure controls are working as intended and these controls protect the confidentiality, integrity and availability of IT resources at the appropriate levels.
Assist with preparing the final Security Assessment Report (SAR) containing the results and findings from the assessment at the conclusion of each security control assessment activity.
Ensure a Plan of Action and Milestones (POA&M) is initiated by the Information System Security Officer (ISSO) for the information system based on findings and recommendations from the SAR.
Evaluate security control assessment documentation and provide written recommendations for security authorization to the AO.
Provide expertise to execute vulnerability assessments on Platform IT systems.
Assist with assembling and submitting the security authorization artifacts to the AO (consisting of, at a minimum, the SSP, the SAR, the POA&M, and a Risk Assessment Report (RAR).
Assess the proposed changes to information systems or software application, their environment of operation, and mission needs to determine if they are security-relevant and could therefore affect system authorization.
Utilize the RMF methodology to successfully implement an information technology process which shall effectively protect the element's information assets and its ability to perform its mission.
Provide guidance to other assessors on the policies and procedures of the job; Provide detailed assessment findings using Government-specified processes and procedure.
Provide solutions and recommendations to remedy security vulnerabilities, threats, to ultimately improve the protection of IT resources and to execute the AFCENT mission.
Utilize assessment results to identify trends and to improve IA training, policies and processes.
Develop reports and trend analysis's to support risk assessment decisions.
Qualified candidates must meet the following mandatory requirements:
Must possess and maintain a Secret Clearance
Proof of IAT-III or IAM-III Certification
Senior (III) and higher positions (Preferred):
- MA/MS in related field AND 3 or more years' relevant experience; or
- BS in related field AND 5 or more years' relevant IT experience; or
- 7 or more years' relevant IT experience.
Mid-level (II) or lower positions:
- BS in related field AND 1 or more years' relevant experience; or
- Associates in related field and 3 or more years' relevant IT experience; or
- 5 or more years' of relevant IT experience.
Oneida Technical Solutions, LLC. is an equal opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, sexual orientation, gender identity, genetic information or any other protected characteristic under applicable law.

#CJ

Apply