The role involves conducting risk assessments, implementing cloud-native security controls, and ensuring regulatory compliance. Key Responsibilities: * Evaluate and enhance cloud security ...
Quick apply
The role involves conducting risk assessments, implementing cloud-native security controls, and ensuring regulatory compliance. Key Responsibilities: * Evaluate and enhance cloud security ...
Google Information Security Analyst
Cary, NC · On-site
$85 - $90/hr
Assess the overall security posture of the Google Workspace environment. * Review Google Drive sharing and collaboration controls. * Evaluate audit, monitoring, and logging capabilities. * Validate ...
Google Information Security Analyst
Cary, NC · On-site
$85 - $90/hr
Assess the overall security posture of the Google Workspace environment. * Review Google Drive sharing and collaboration controls. * Evaluate audit, monitoring, and logging capabilities. * Validate ...
Conduct regular audits and assessments to evaluate compliance status. * Collaborate with internal teams to address non-compliance issues and implement corrective actions. Security Monitoring and ...
Quick apply
Conduct regular audits and assessments to evaluate compliance status. * Collaborate with internal teams to address non-compliance issues and implement corrective actions. Security Monitoring and ...
Security-Engineer III
Durham, NC · On-site
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
Security-Engineer III
Durham, NC · On-site
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
Security Engineer
Durham, NC · On-site
Minimum 10+ years of IT experience * 8+ years of Security Assessment, IT Risk Compliance, IT audit or similar experience * 5+ years internal control risk management, IT controls and related standards
Security Engineer
Durham, NC · On-site
Minimum 10+ years of IT experience * 8+ years of Security Assessment, IT Risk Compliance, IT audit or similar experience * 5+ years internal control risk management, IT controls and related standards
Security Engineer
Durham, NC · On-site
Experience in information security threat and vulnerability analysis Understanding of networking and core Internet protocols (TCP/IP, HTTP, etc.) Experience using network security assessment tools ...
Security Engineer
Durham, NC · On-site
Experience in information security threat and vulnerability analysis Understanding of networking and core Internet protocols (TCP/IP, HTTP, etc.) Experience using network security assessment tools ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Information Security Officer
Raleigh, NC · On-site
We offer an excellent compensation package Perform a detailed security assessment and establish the current baseline. Create an information security improvement plan and implement the plan by closely ...
Information Security Officer
Raleigh, NC · On-site
We offer an excellent compensation package Perform a detailed security assessment and establish the current baseline. Create an information security improvement plan and implement the plan by closely ...
Senior Product Security Engineer
Raleigh, NC · On-site
$168K - $210K/yr
Joining Collibra's Product Security team Collibra is seeking a Senior Product Security Engineer to ... Able to assess and communicate the impact of Common Vulnerability Weaknesses (CVEs) on custom ...
Senior Product Security Engineer
Raleigh, NC · On-site
$168K - $210K/yr
Joining Collibra's Product Security team Collibra is seeking a Senior Product Security Engineer to ... Able to assess and communicate the impact of Common Vulnerability Weaknesses (CVEs) on custom ...
Risk Management and Threat Assessments: * Conduct ongoing enterprise-wide cybersecurity risk ... Security Operations & Incident Response: * Own the organization's incident response program ...
Quick apply
Risk Management and Threat Assessments: * Conduct ongoing enterprise-wide cybersecurity risk ... Security Operations & Incident Response: * Own the organization's incident response program ...
Senior Product Security Engineer
Raleigh, NC · Hybrid
$168K - $210K/yr
Joining Collibra's Product Security team Collibra is seeking a Senior Product Security Engineer to ... Able to assess and communicate the impact of Common Vulnerability Weaknesses (CVEs) on custom ...
Senior Product Security Engineer
Raleigh, NC · Hybrid
$168K - $210K/yr
Joining Collibra's Product Security team Collibra is seeking a Senior Product Security Engineer to ... Able to assess and communicate the impact of Common Vulnerability Weaknesses (CVEs) on custom ...
Engineer III, Security Engineer
Cary, NC · On-site
Security Assessments: Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts. * Technical Communication: Articulate complex ...
Engineer III, Security Engineer
Cary, NC · On-site
Security Assessments: Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts. * Technical Communication: Articulate complex ...
Research various government standards and requirements documents, code requirements for building and life safety, and other industry guidelines. 7. Conducts security system assessments as a part of a ...
Research various government standards and requirements documents, code requirements for building and life safety, and other industry guidelines. 7. Conducts security system assessments as a part of a ...
Network security assessments and analysis for corporate and non-corporate network environments; Firewall policy evaluation, review, and design; Ensure compliance across applications and networks for ...
Network security assessments and analysis for corporate and non-corporate network environments; Firewall policy evaluation, review, and design; Ensure compliance across applications and networks for ...
Network security assessments and analysis for corporate and non-corporate network environments; • Firewall policy evaluation, review, and design; • Ensure compliance across applications and ...
Network security assessments and analysis for corporate and non-corporate network environments; • Firewall policy evaluation, review, and design; • Ensure compliance across applications and ...
Application Security Engineer (REMOTE)
Raleigh, NC · Remote
$117K - $146K/yr
Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities. Define, maintain, and enforce secure coding standards ...
Application Security Engineer (REMOTE)
Raleigh, NC · Remote
$117K - $146K/yr
Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities. Define, maintain, and enforce secure coding standards ...
You will partner with Cisco's industry-leading engineering teams to assess the latest system and application architectures, contribute to creative security solutions, and gain unparalleled access to ...
You will partner with Cisco's industry-leading engineering teams to assess the latest system and application architectures, contribute to creative security solutions, and gain unparalleled access to ...
Security Assessor information
See Raleigh, NC salary details
$8.65 - $14.76
2% of jobs
$14.76 - $20.88
2% of jobs
$20.88 - $27
0% of jobs
$27 - $33.12
0% of jobs
$33.12 - $39.23
3% of jobs
$39.23 - $45.35
5% of jobs
$48.95 is the 25th percentile. Wages below this are outliers.
$45.35 - $51.47
21% of jobs
The median wage is $56.46 / hr.
$51.47 - $57.59
20% of jobs
$57.59 - $63.70
18% of jobs
$65.12 is the 75th percentile. Wages above this are outliers.
$63.70 - $69.82
15% of jobs
$69.82 - $75.94
14% of jobs
$8
$57
$75
How much do security assessor jobs pay per hour?
As of Jul 16, 2026, the average hourly pay for security assessor in Raleigh, NC is $57.12, according to ZipRecruiter salary data. Most workers in this role earn between $49.09 and $66.11 per hour, depending on experience, location, and employer.
What does a security assessor do?
A security assessor evaluates an organization's security measures, policies, and systems to identify vulnerabilities and ensure compliance with security standards. They conduct risk assessments, review security controls, and may use tools like vulnerability scanners, often requiring certifications such as CISSP or CISA. Their work helps organizations protect sensitive information and maintain security posture.
How to become a security control assessor?
To become a security control assessor, individuals typically need a background in cybersecurity, information technology, or related fields, along with experience in security frameworks such as NIST or ISO. Earning relevant certifications like Certified Authorization Professional (CAP) or Certified Information Systems Security Professional (CISSP) can enhance qualifications. Assessors often undergo specialized training and may need to obtain government or industry-specific clearance depending on the environment they work in.
Is SOC analyst a high paying job?
SOC analysts typically earn competitive salaries that vary by experience, location, and employer. Entry-level positions may start lower, but with certifications like CompTIA Security+ or CISSP, salaries can increase significantly, especially for those with specialized skills in threat detection and incident response.
What are the key skills and qualifications needed to thrive as a Security Assessor, and why are they important?
To thrive as a Security Assessor, you need a thorough understanding of information security principles, risk assessment methodologies, and compliance frameworks, often supported by a degree in cybersecurity or related fields. Familiarity with tools such as vulnerability scanners, compliance management systems, and certifications like CISSP, CISA, or PCI QSA is typically required. Strong analytical thinking, attention to detail, and clear communication are vital soft skills for accurately identifying risks and conveying findings to stakeholders. These skills ensure that organizations remain compliant, secure, and resilient against evolving cyber threats.
What are some common challenges Security Assessors face when conducting security audits, and how can they overcome them?
Security Assessors often encounter challenges such as incomplete documentation, resistance from stakeholders, and rapidly changing technology environments. To overcome these, assessors should develop strong communication skills to build trust, encourage transparency, and ensure all relevant parties understand the importance of compliance. Staying current with industry standards and maintaining flexibility in their assessment approach also helps them adapt to new threats and technologies, ensuring thorough and effective audits.
What are Security Assessors?
Security Assessors are professionals who evaluate the security measures, policies, and practices of an organization to identify vulnerabilities and ensure compliance with security standards and regulations. They conduct assessments such as penetration testing, risk analysis, and audits to help organizations safeguard their information systems against threats. Security Assessors often work with frameworks like PCI DSS, ISO 27001, and NIST to ensure best practices are followed. Their work is crucial for maintaining the confidentiality, integrity, and availability of sensitive data.
What is the difference between Security Assessor vs Security Analyst?
| Aspect | Security Assessor | Security Analyst |
|---|---|---|
| Certifications | ISO 27001 Lead Auditor, CISSP, CISA | CISSP, Security+ |
| Work Environment | Audit, compliance, risk assessment | Monitoring, incident response, threat analysis |
| Employer & Industry | Consulting firms, large organizations, government | IT departments, security firms, corporations |
Security Assessors primarily focus on evaluating security controls, conducting audits, and ensuring compliance with standards like ISO 27001. Security Analysts monitor security systems, analyze threats, and respond to incidents. While both roles require cybersecurity knowledge and certifications, Assessors emphasize compliance and auditing, whereas Analysts focus on threat detection and response.
Which security certificate pays the most?
For security assessors, the Certified Information Systems Security Professional (CISSP) is among the highest-paying certifications, often leading to higher salaries due to its advanced knowledge requirements. Other valuable certifications include Certified Information Security Manager (CISM) and Certified Ethical Hacker (CEH), which can also enhance earning potential in security roles. Salary varies based on experience, location, and employer, but these certifications are generally associated with higher compensation in cybersecurity and security assessment positions.
What are popular job titles related to Security Assessor jobs in Raleigh, NC? For Security Assessor jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Security Assessor jobs in Raleigh, NC look for? The top searched job categories for Security Assessor jobs in Raleigh, NC are:
Contractor
Posted 24 days ago
Job description
Cloud Security Consultant
Location: Remote – USA
Type: Contract / Full-Time
Experience: 5–15Years
Job Description: Seeking an experienced Cloud Security Consultant to assess and implement robust security measures across AWS, Azure, or GCP environments. The role involves conducting risk assessments, implementing cloud-native security controls, and ensuring regulatory compliance.
Key Responsibilities:
Evaluate and enhance cloud security architecture and configurations
Implement security controls, encryption, IAM, and logging
Perform security assessments, audits, and gap analysis
Support DevSecOps and infrastructure-as-code security
Align cloud operations with compliance frameworks (HIPAA, SOC 2, etc.)
Must Have Skills:
Hands-on experience with AWS/Azure/GCP security services
Familiarity with tools like GuardDuty, Security Hub, Azure Security Center
Knowledge of cloud networking, IAM policies, and encryption
Experience in CIS benchmarks, NIST, or ISO 27001 compliance
About AceStack
Sourced by ZipRecruiter
AceStack is a global IT consulting & Staffing agency. We deal in Health care (Nursing, Allied, Clinical/Non-clinical) Staffing, Engineering Staffing & I.T. Staffing. Founded in 2017 in New Jersey, AceStack has reported consistent growth and profit every year and carries zero debt. AceStack consultants are placed across USA, Canada, Mexico, and Asia. In addition to our headquarters in New Jersey – USA, we also have offices in Canada, Noida, and Ahmedabad. AceStack’s exceptionally high-touch service keeps our clients satisfied and our Consultants/Travelers engaged. We believe in investing in our Consultants/Clients in a variety of ways. We employ AceStack ambassador who helps guide Consultants through the on-boarding process and ensure the transition into their new role with our Client is seamless. We also have dedicated Consultant care representatives located throughout our organization who provide the same level of attention throughout our Consultant’s tenure. Due to this level of attention and care, AceStack enjoys not only one of the highest retention rates in the staffing industry but also one of the highest redeployment rates in the industry.