2

Remote Security Controls Assessor Jobs (NOW HIRING)

Junior Security Control Assessor

Bethesda, MD ยท Remote

$100K - $115K/yr

Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation ... Help evaluate cloud security packages and inherited controls (as applicable) * Document findings ...

Junior Security Control Assessor

Bethesda, MD ยท Remote

$100K - $115K/yr

Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation ... Help evaluate cloud security packages and inherited controls (as applicable) * Document findings ...

Junior Security Control Assessor

Bethesda, MD ยท Remote

$100K - $115K/yr

Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation ... Help evaluate cloud security packages and inherited controls (as applicable) * Document findings ...

... Type 2 Assessments. Position Type: Consultant (Project-Based) Location: Remote Start: Future ... controls against the relevant AICPA Trust Services Criteria (TSC), including: * Security:

Perform official CMMC Level 2 assessments for organizations seeking certification ... Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance ...

Perform official CMMC Level 2 assessments for organizations seeking certification ... Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance ...

... formal Security Control Assessment (SCA) and Final Assessment Report (SAR) validation for the same systems. This position is remote first, with periodic on-site support in the Washington, DC ...

Herndon, VA 20171 (Remote) Employment Type: FTE + Benefits Client is supporting the FedRAMP and ... This effort requires security testing/assessment support, the knowledge/development of the ...

Description Keeper Security is seeking a Security Engineer to help strengthen and scale our security operations and enterprise security controls across a global organization.This is a 100% remote ...

... security controls across a global organization.This is a 100% remote position, with an opportunity ... Interview notes, assessments, communications * Scheduling information Information From Others:

This position is based in Washington, DC and may require a combination of on-site and remote ... assessments, remediation validation, and risk reduction efforts. * Integrate security controls into ...

Showing results 21-40

Remote Security Controls Assessor information

See salary details

$8

$58

$78

How much do remote security controls assessor jobs pay per hour?

As of Aug 21, 2026, the average hourly pay for remote security controls assessor in the United States is $58.77, according to ZipRecruiter salary data. Most workers in this role earn between $50.48 and $68.03 per hour, depending on experience, location, and employer.

What is a remote security controls assessor?

Remote Security Controls Assessors are professionals who evaluate and verify the effectiveness of an organization's security measures, policies, and procedures without being physically present on-site. They use a variety of tools and methods to assess compliance with security standards, identify vulnerabilities, and recommend improvements. Working remotely, these assessors often conduct interviews, review documentation, and perform technical tests to ensure that the organization's information systems are secure and meet regulatory requirements.

What skills and qualifications are needed to thrive as a remote security controls assessor?

To thrive as a Remote Security Controls Assessor, you need a solid understanding of information security frameworks, risk management practices, and compliance standards, often supported by a degree in cybersecurity or related certifications like CISSP, CISA, or Security+. Familiarity with security assessment tools, vulnerability scanners, and compliance management platforms is typically required. Strong analytical thinking, attention to detail, and effective written and verbal communication skills help you excel when evaluating controls and reporting findings remotely. These skills are essential to ensure accurate risk identification and maintain regulatory compliance while collaborating efficiently from a distance.

What challenges might I face as a remote security controls assessor, and how can I overcome them?

As a Remote Security Controls Assessor, one common challenge is effectively evaluating technical and administrative controls without being physically present at client sites. This often requires strong communication skills to coordinate with on-site staff, request and interpret evidence remotely, and clarify any ambiguities. Leveraging secure collaboration tools, maintaining clear documentation, and setting regular check-ins with clients can help address these challenges. Additionally, staying up to date with remote assessment methodologies and compliance frameworks will ensure thorough and accurate evaluations.

What is the difference between Remote Security Controls Assessor vs Security Analyst?

AspectRemote Security Controls AssessorSecurity Analyst
CertificationsISO 27001 Lead Auditor, CISSP, CISACISSP, Security+
Work EnvironmentRemote or on-site, focusing on compliance assessmentsTypically office-based, analyzing security data and incidents
Employer & IndustryGovernment agencies, consulting firms, large corporationsFinancial institutions, tech companies, healthcare

The Remote Security Controls Assessor primarily evaluates security controls for compliance, often working remotely, while the Security Analyst monitors and analyzes security threats and incidents. Both roles require security certifications, but the assessor focuses on audits and controls, whereas the analyst emphasizes threat detection and response.

More about Remote Security Controls Assessor jobs

What cities are hiring for Remote Security Controls Assessor jobs?

Cities with the most Remote Security Controls Assessor job openings:

What are the most commonly searched types of Security Controls Assessor jobs?

The most popular types of Security Controls Assessor jobs are:

What states have the most Remote Security Controls Assessor jobs?

States with the most job openings for Remote Security Controls Assessor jobs include:

What job categories do people searching Remote Security Controls Assessor jobs look for?

The top searched job categories for Remote Security Controls Assessor jobs are:

Infographic showing various Remote Security Controls Assessor job openings in the United States as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% Remote job distribution, with an average salary of $122,236 per year, or $58.8 per hour.

Junior Security Control Assessor

System One

Bethesda, MD โ€ข Remote

$100K - $115K/yr

Other

Medical, Dental, Vision, Life, Retirement

Posted 28 days ago


Job description

Location: Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation: $100,000–$115,000/year Target start: by end of August 2026 Clearance / Public Trust: Public Trust eligibility (Tier 2/3) required

About the role

We’re hiring a Junior Security Control Assessor to support independent security control assessments across the system authorization lifecycle. You’ll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800-53 Rev. 5, using JCAM practices.

This is a great fit for someone who enjoys cybersecurity compliance, evidence-based assessments, and strong technical writing—without being the person who authors the entire authorization package.

What you’ll do

  • Support independent Security Control Assessments (SCAs) across the authorization lifecycle
  • Review and validate security authorization documentation (SSP, SAP, SAR, POA&M, contingency plans, and supporting artifacts)
  • Assess security control implementation through documentation review, interviews, and technical validation
  • Help evaluate cloud security packages and inherited controls (as applicable)
  • Document findings, recommendations, and remediation activities clearly and professionally
  • Assist with evidence validation and remediation tracking
  • Partner with system owners and ISSOs while maintaining assessor independence

Required qualifications

  • Education: Bachelor’s in Cybersecurity, IT, Computer Science, Information Systems (or similar)
    • OR 4 additional years of relevant experience in lieu of a degree
  • Experience: 3–5 years supporting cybersecurity, information assurance, RMF, security assessments, compliance, or IT operations
  • Working knowledge of:
    • NIST RMF (800-37) and NIST SP 800-53 Rev. 5
    • JCAM methodology
  • Experience reviewing security documentation and assessment evidence/artifacts
  • Strong analytical skills and technical writing ability

Preferred (nice to have)

  • Experience with eMASS or similar GRC platforms
  • Familiarity with FedRAMP, cloud security concepts, C-SCRM, and related federal security frameworks
  • Experience supporting independent audits/assessments (e.g., external review organizations)

Tools/tech exposure (helpful)

  • JCAM
  • Tenable
  • CrowdStrike
  • Splunk / Splunk Enterprise
  • AWS
  • Python (plus)

Certifications (preferred, not all required)

  • ISC2 CC or CGRC
  • CompTIA Security+, CySA+, PenTest+, CASP+
  • CEH
  • Microsoft SC-900

  • System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

    System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

    #M-1 #LI-AJ1 Ref: #856-Baltimore-S1


System One logo

About System One

Sourced by ZipRecruiter

System One helps employers get work done more efficiently and economically without compromising quality. Over our 35+ year history, we've helped connect thousands of talented people with innovative companies. The excitement of a perfect fit motivates us every single day.

Industry

Business consulting services and recruiting and staffing services

Company size

5,001 - 10,000 Employees

Headquarters location

Pittsburgh, PA, US