ZipRecruiter

Log In

2

Entry Level Security Controls Assessor Jobs (NOW HIRING)

Bank of America

Third Party Cyber Assessor

Chicago, IL · On-site

$95K - $143K/yr

Key responsibilities span pre-assessment, assessment, and/or remediation activities ... Information Security Controls (Infrastructure Security, Access Management, Physical Security ...

Bank of America

Third Party Cyber Assessor

Denver, CO · On-site

$95K - $143K/yr

Key responsibilities span pre-assessment, assessment, and/or remediation activities ... Information Security Controls (Infrastructure Security, Access Management, Physical Security ...

Bank of America

Third Party Cyber Assessor

Denver, CO · On-site

$95K - $143K/yr

Key responsibilities span pre-assessment, assessment, and/or remediation activities ... Information Security Controls (Infrastructure Security, Access Management, Physical Security ...

Electrosoft

Security Control Assessor

Washington, DC · Hybrid

$155K - $165K/yr

Security Control Assessor III Responsibilities: * Leads comprehensive security assessments for complex or high-impact systems. * Oversees control testing strategies, validates remediation ...

next page

Showing results 1-20

All JobsSecurity Controls Assessor JobsEntry Level Security Controls Assessor Jobs

Entry Level Security Controls Assessor information

See salary details

$8

$58

$78

How much do entry level security controls assessor jobs pay per hour?

As of Jun 9, 2026, the average hourly pay for entry level security controls assessor in the United States is $58.77, according to ZipRecruiter salary data. Most workers in this role earn between $50.48 and $68.03 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an Entry Level Security Controls Assessor, and why are they important?

To thrive as an Entry Level Security Controls Assessor, you typically need foundational knowledge of cybersecurity principles, risk management frameworks, and a relevant degree such as in information technology or cybersecurity. Familiarity with tools like NIST SP 800-53, vulnerability scanners, and compliance management systems, as well as certifications such as CompTIA Security+ or CAP, are often expected. Strong analytical thinking, attention to detail, and clear written and verbal communication skills help you excel in performing assessments and documenting findings. These skills and qualifications are crucial for accurately evaluating security controls, ensuring regulatory compliance, and effectively communicating risks and recommendations to stakeholders.

What are some common challenges faced by entry level Security Controls Assessors during their initial projects?

Entry level Security Controls Assessors often encounter challenges such as quickly learning to interpret complex regulatory frameworks (like NIST or FedRAMP), understanding the technical environment of the organization, and effectively communicating findings to both technical and non-technical stakeholders. Adapting to varying documentation standards and balancing multiple concurrent assessments can also be demanding. However, these challenges provide valuable learning opportunities and are typically supported by mentorship from senior team members and structured onboarding processes.

What are Entry Level Security Controls Assessors?

Entry Level Security Controls Assessors are professionals who help organizations evaluate and maintain their security controls to ensure compliance with relevant standards and regulations. They typically assist with reviewing security policies, conducting risk assessments, and verifying that technical and administrative safeguards are in place. This role is often an introduction to cyber risk management and compliance, providing foundational experience in identifying vulnerabilities and supporting remediation efforts. Entry level assessors usually work under the supervision of more experienced security professionals and may support audits, documentation, and reporting tasks.

What is the difference between Entry Level Security Controls Assessor vs Security Analyst?

AspectEntry Level Security Controls AssessorSecurity Analyst
CertificationsCompTIA Security+, CISSP (entry-level), Security+CompTIA Security+, CISSP (entry-level), Security+
Work EnvironmentAudit and compliance settings, government agencies, consulting firmsIT departments, cybersecurity teams, corporate environments
Primary FocusAssessing security controls, compliance checks, vulnerability identificationMonitoring security, incident response, threat analysis

While both roles involve cybersecurity fundamentals, the Entry Level Security Controls Assessor primarily focuses on evaluating security controls and ensuring compliance, often in audit or assessment settings. In contrast, a Security Analyst concentrates on monitoring security systems, analyzing threats, and responding to incidents within an organization. Both roles require similar certifications and work environments but differ in their core responsibilities and daily tasks.

More about Entry Level Security Controls Assessor jobs
What cities are hiring for Entry Level Security Controls Assessor jobs? Cities with the most Entry Level Security Controls Assessor job openings:
What are the most commonly searched types of Security Controls Assessor jobs? The most popular types of Security Controls Assessor jobs are:
What states have the most Entry Level Security Controls Assessor jobs? States with the most job openings for Entry Level Security Controls Assessor jobs include:
What job categories do people searching Entry Level Security Controls Assessor jobs look for? The top searched job categories for Entry Level Security Controls Assessor jobs are:
Entry Level Security Controls Assessor jobs near you
Infographic showing various Entry Level Security Controls Assessor job openings in the United States as of June 2026, with employment types broken down into 4% Locum Tenens, 85% Part Time, and 11% Contract. Highlights an 97% Physical, 1% Hybrid, and 2% Remote job distribution, with an average salary of $122,236 per year, or $58.8 per hour.
Security Control Assessor (SCA)

Security Control Assessor (SCA)

System High Corporation

Arlington, VA • On-site

Full-time

Posted 18 days ago

Job description

Position Overview
The Security Control Assessor must fulfill a variety of cybersecurity functions, to include: System Administrator, Enterprise Oversight, certification and accreditation, SAP and SCI assessment and authorization (A&A), Platform Information Technology (PIT) assessment and authorization, Information Assurance and Technical Security for AIS, Information Technology (IT) Network Administration & Support, and Information System Security Officer support. Will perform the IA tasks necessary to ensure that the existing DARPA IA program meets National, DoD, and DARPA IA standards, and continues to protect and defend DARPA information and Information Systems (IS) by ensuring the confidentiality integrity, availability, authentication, and non-repudiation of the systems.
The Senior Cybersecurity Specialist possesses experience in successfully participating in DoD Special Access Program Joint Certification and Accreditation, Assessment, and Approval events for DoD Joint cyber ranges and/or jointly accredited SAP information systems. The DARPA systems to be protected include systems that process and store information from controlled unclassified (CUI) up to Top Secret, including SAP and SCI caveats/compartments.
Duties shall include, but are not limited to the following:
  • Must possess experience in successfully meeting and participating in Defense Information System Agency (DISA), National Security Agency, and USCBYERCOM Computer Network Defense Program (CNDSP) and CBYERCOM Computer Readiness Inspections (CCRI)
  • Experience with network security devices, classified Local Area Networks, Wide Area Networks, public key infrastructure (PKI), virtual machines, and end-point security solutions.
  • Must be thoroughly familiar with, understand, and be able to apply the standards and requirements contained in the following:

  1. DoD Instruction 5220.22 National Industrial Security Program (NISPOM) Operating Manual, Chapter 8
  2. Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM Version 3.2
  3. DoD Directive 5205.16 The DoD Insider Threat Program
  4. NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations
  5. DoD Joint Special Access Program Implementation Guide (JSIG)
  6. Committee for National Security System Policy (CNSSP) Policy (CNSSP) No. 22 on Information Assurance Risk Management for National Security Systems
  7. CNSSP No. 26 National Policy on Reducing the Risk of Removable Media
  8. Committed for National Security Systems Directive (CNSSD) No. 504 Directive on Protecting National Security Systems From Insider Threat
  9. Committee for National Security System Instruction (CNSSI) No. 1253 Security categorization and Control Selection for National Security Systems
  10. DoDD 8000.1, Management of DoD Information Resources and Information Technology
  11. DoD Directive 8100.2, Use of Commercial Wireless Devices, Services, and Technologies in the DoD Global Information Grid (GIG)
  12. DoDD 8140.01 Cyberspace Workforce Management
  13. DoDI 8500.01 Cybersecurity
  14. DoD Instruction 8510.01 Risk Management Framework (RMF) for DoD Information Technology
  15. DoD Directive 8530.1, Computer Network Defense (CND)
  16. DoD Instruction 8530.2, Support to CND
  17. DoD Instruction 8551.1, Ports, Protocols, and Services Management (PPSM)
  18. DoD Manual 8570.01-M Information Assurance Workforce Improvement Program
  19. DCID 6/3, Protecting SCI within Information Systems
  20. Intelligence Community Directive (ICD) 503
  21. Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B Cyber Incident Handling Program
  22. Defense Federal Acquisition Regulation Supplement (DFARS)
  23. Clause 253.204-7012: Safeguarding Unclassified Controlled Technical Information
  24. DoDI 8581.01 Information Assurance Policy for Space Systems Used by the Department of Defense

Note: The legacy cybersecurity/information security accreditation governance documents are listed due to the state of transition of network accreditation guidance and the fact that networks may be operating under legacy certification and accreditation guidance.
  • Ensure system security requirements are addressed during all phases of DARPA program life cycles (concept development, Request for Information (RFI), Request for Proposal (RFP) or BAA, Proposal, Selection, Award, Closeout, Transition, etc.).
  • Planning, preparing, and executing inspections, authorization and approval (A&A) events IAW with the respective policies detailed in paragraph 3.12.c. for all classifications of networks; to include the development and review of Automated Information System Authorization and Approval Packages.
  • Develop, review, endorse, and recommend action by the authorizing official (AO), delegated authorizing official (DAO), or designated approval authority (DAA) for system certification documentation
    • Conduct quality control of system accreditation packages for completeness of accreditation artifacts within 3 business days of receipt from the technology office security staffs or their cleared defense industry contractors and/or participating government agencies.
    • Process authorization and approval or denial documentation to the respective DAPRA AO/DAO/or DAA within 10 business days of receipt of a complete package
  • Conduct security control assessments for the evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an AIS
  • Provide an assessment of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities
  • Analyze and make recommendations in support of DARPA accredited network Configuration Control Board cases within 10 calendar days of case validation by the respective network's Information System owner
  • Monitor activities of DARPA accredited networks and DARPA DAO Accredited performer networks
  • Provide advice, assistance, and analysis of threats and vulnerabilities and risk mitigation and acceptance recommendations, as required. Conduct certification tests that include verification that the features and assurances are functional and support accreditation
  • Work collaboratively with the MSO/Information Technology Directorate (ITD) in the authorization and approval and continuous monitoring of DARPA unclassified and classified networks; including but not limited to:
  1. DARPA Management Security System (DMSS) - Unclassified
  2. DARPA Public Network (DPN) - Unclassified
  3. DARPA Secret Network (DSN)/Secret Internet Protocol Router Network (SIPRNet) Connection - up to SECRET Collateral
  4. DARPA Joint Worldwide Intelligence Communications System (JWICS) Network (DJN)/JWICS Connections - up to TOP SECRET SCI
  5. DARPA Secure Wide Area Network (DSWAN) - up to SECRET Collateral
  6. Multi-Level Security System (SAVANNAH) - up to TOP SECRET SAP and SCI
  • Review and recommend changes or amplification of policy, procedures, and strategy development
  • Evaluate Information Assurance (IA) products and provide written recommendations as to their risk and usefulness and/or adoption for the DARPA IA mission
  • Evaluate information technology (IT) vulnerabilities to assess whether additional safeguards are prudent and ensure certification is accomplished for each information system
  • Develop and maintain a formal, written Information Systems Security Program SOP
  • Ensure all Information System Security Officers (ISSO), network administrators, and other Automated Information Security (AIS) personnel, to include DARPA performers performing these functions, receive the necessary and required technical and security training to carry out their duties
  • Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local AIS security training.
  • Maintain a repository for all system certification/accreditation documentation and modifications
  • Coordinate AIS security inspections, tests, and reviews
  • Prepare policies and procedures for responding to security incidents and for investigating and reporting security violations and incidents
  • Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered
  • Assess changes in a system, its environment, or operational needs that could affect the accreditation
  • Ensure configuration management (CM) for security-relevant AIS software, hardware, and firmware is maintained and documented
  • Perform system audits on multiple systems; work closely with system administrators and ensure current security measures are sufficient and in compliance with approved policies and processes
  • Perform, and conduct training as required, for the execution of secure file transfers/trusted downloads between local systems to storage devices, this includes secure down writing of data between systems of different security levels
  • Provide technical advice and assistance, as required, and perform technical oversight on telecommunications requirements for Collateral, SAP, and SCI systems and networks
  • In coordination with SID Emergency Management, review and provide AIS security relevant input to DARPA Emergency/Disaster plans and procedures.

Required Skills (Knowledge, Skills, Abilities)
  • Relevant work experience as specified for an Information Assurance Technical (IAT) Level III or Information Assurance Management (IAM) Level II in DoD Manual 8570.1-M
  • Extensive knowledge of RMF (Risk Management Framework)
  • Experience assessing and authorizing various PIT systems (of all classification levels) including but not limited to; space systems, manned and unmanned aircraft systems, manned and unmanned underwater vessels, cyber operation platforms, cyber capabilities, directed energy systems, and hand-held battle field orientation electronic devices

Professional Business Functions
  • Attend meetings (either locally or out-of-area) and create meeting summaries or trip reports
  • Prepare and submit meeting minutes on an as-required basis
  • Prepare/present briefings, incorporating graphics (if appropriate) for/to SID/ DARPA leaders
  • Prepare various security forms associated with their duties
  • Assist in entry control and perform escort duties for visitors
  • Answer telephones and other modes of administrative communications in the performance of duties
  • Perform self-inspections, identify security discrepancies, and report security incidents
  • Perform, or support, security inspections, identify security discrepancies and prepare reports
  • Perform courier duties within the continental United States (CONUS)
  • Perform user-level security administrator and information security responsibilities are required and in compliance with US Codes, Executive Orders, and DoD and DARPA policy
  • Perform objective reviews on all documentation encountered during performance of duties

Clearance
  • Minimum of active Top Secret (TS)
  • TS/SCI strongly desired
  • Subject to a random counter-intelligence scope polygraphs as a condition of access eligibility.

Years of Experience/Education Requirements
  • The Senior Cybersecurity positions require a Bachelor's degree in Computer Science or Information Systems with at least 12 years of specific, demonstrable, and successful experience fulfilling a Cybersecurity role for a DoD or IC customer on similar size and scale.
  • A Master's degree in Computer Science or Information Systems may substitute for 4 years of relevant experience.

Certification Requirements
  • DoD Approved Baseline Certification as a CISSP IAW DoD 8570.1-M

Travel Requirements
  • Some travel is required for this position.
  • Ability to travel to CONUS and/or OCONUS locations
  • Must have active US passport for OCONUS travel requirements

Additional Information
  • This job description is not designed to cover or contain all job duties required of the employee. There may be additional activities, duties and/or responsibilities that are required for this position that are not listed in this job description.
  • In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.
  • System High is a Military friendly employer. Our extensive work on behalf of the U.S. government offers those who have served in uniform an opportunity to continue to serve their country in a new and exciting way while enjoying a successful civilian career.
  • System High values the power and strength of diverse backgrounds on the culture and performance of our company. We strive to maintain an inclusive culture to encourage each employee to bring their whole self to the mission.
  • System High Corporation is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status, or any other characteristic protected by law. We are proud to be an equal opportunity workplace.
  • If you require a reasonable accommodation to apply for a position with us, please email recruiting@systemhigh.com
  • Legal notices can be viewed on the following PDFs: Know Your Rights: Workplace Discrimination is Illegal; EPPA Notice; FMLA Notice

Warning: Beware of recruitment scams: System High will never request money or personal purchases during the hiring process. Verify all communications come from a systemhigh.com or msg.paycomonline.com email address.

Apply