ZipRecruiter

Log In

1

Security Controls Assessor Jobs in Indiana (NOW HIRING)

Barbaricum

The selected candidate will assess security controls, support Security Assessment and Authorization (SA&A) efforts, and develop accreditation documentation to ensure compliance with federal and DoD ...

Barbaricum

The selected candidate will assist in evaluating security controls, supporting Security Assessment and Authorization (SA&A) efforts, and maintaining compliance with applicable cybersecurity ...

FBT Gibbons LLP

Security Architect

Indianapolis, IN · On-site

$62 - $80.25/hr

... assessments by evaluating compliance gaps, developing remediation plans, and supporting implementation of required security controls. * Review and monitor firm systems to ensure compliance with ...

next page

Showing results 1-20

All JobsSecurity Controls Assessor JobsSecurity Controls Assessor Jobs in Indiana

Security Controls Assessor information

See Indiana salary details

$8

$55

$74

How much do security controls assessor jobs pay per hour?

As of Aug 7, 2026, the average hourly pay for security controls assessor in Indiana is $55.92, according to ZipRecruiter salary data. Most workers in this role earn between $48.03 and $64.71 per hour, depending on experience, location, and employer.

What is a security controls assessor?

Security Controls Assessors are professionals responsible for evaluating and validating the effectiveness of security controls within an organization's information systems. They conduct assessments to ensure compliance with regulatory standards, such as NIST, FISMA, or other security frameworks. Their work helps organizations identify vulnerabilities, manage risks, and maintain the confidentiality, integrity, and availability of critical data. Security Controls Assessors often provide recommendations for remediation and support efforts to achieve or maintain security certifications.

What are the key skills and qualifications needed to thrive as a security controls assessor, and why are they important?

To thrive as a Security Controls Assessor, you need expertise in information security frameworks, risk assessment methodologies, and compliance requirements, often supported by a degree in cybersecurity or related fields and certifications like CISSP, CISA, or CAP. Familiarity with tools such as vulnerability scanners, security assessment platforms, and compliance management systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and clearly report findings to stakeholders. These skills ensure that organizations maintain robust security postures and meet regulatory requirements to protect critical assets.

What are some common challenges security controls assessors face when evaluating compliance across multiple systems?

Security Controls Assessors often encounter challenges with inconsistent documentation, varying system configurations, and differing interpretations of compliance standards across departments. Coordinating with multiple teams to collect evidence and clarify control implementations can be time-consuming, especially in large organizations. Staying current with evolving regulations and ensuring all systems meet the latest requirements also demands continuous learning and adaptability. Building strong communication channels with system owners and IT staff helps overcome these hurdles and ensures thorough, accurate assessments.

What does a security controls assessor do?

A security controls assessor (SCA) evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems, working either alone or as part of a team. As a security controls assessor, your duties begin with conducting an in-depth assessment of the management, operations, and technical security controls. You must analyze information and prepare reports describing the vulnerability level of the network with specific detail as to what compromises data systems. You then develop a plan to address vulnerabilities and continue to monitor the security of network systems.

What is the difference between Security Controls Assessor vs Security Analyst?

AspectSecurity Controls AssessorSecurity Analyst
CertificationsISO 27001 Lead Auditor, CISSP, CISACISSP, Security+
Work EnvironmentAssessing security controls, compliance auditsMonitoring security systems, incident response
Employer & IndustryGovernment agencies, compliance firmsCorporate IT, cybersecurity teams

The Security Controls Assessor primarily evaluates and verifies security controls for compliance, often in government or regulated environments. In contrast, a Security Analyst focuses on monitoring, analyzing, and responding to security threats within organizations. While both roles require security certifications and involve cybersecurity, their core responsibilities and work settings differ significantly.

More about Security Controls Assessor jobs
What are popular job titles related to Security Controls Assessor jobs in Indiana? For Security Controls Assessor jobs in Indiana, the most frequently searched job titles are:
What job categories do people searching Security Controls Assessor jobs in Indiana look for? The top searched job categories for Security Controls Assessor jobs in Indiana are:
What are popular job titles related to Security Controls Assessor jobs in IN? For Security Controls Assessor jobs in IN, the most frequently searched job titles are:
Security Controls Assessor jobs near you
Infographic showing various Security Controls Assessor job openings in Indiana as of August 2026, with employment types broken down into 85% Full Time, 5% Part Time, 5% Temporary, and 5% Contract. Highlights an 86% In-person, and 14% Remote job distribution, with an average salary of $116,315 per year, or $55.9 per hour.

Information System Security Specialist II

TRISTAR

Bloomington, IN • On-site

Full-time

Re-posted 26 days ago

Job description

Description:

We are seeking an experienced Information System Security Specialist II to support the security authorization, compliance, and continuous monitoring activities of mission-critical information systems. The successful candidate will create and maintain IA artifacts, support Authority to Operate (ATO) efforts using the Risk Management Framework (RMF), perform compliance scanning and patch management activities, and collaborate with system owners, ISSMs, and technical teams to ensure systems remain secure and compliant.


Key Responsibilities:

  • Create, update, and maintain IA artifacts required to obtain and sustain favorable Authority to Operate (ATO) decisions.
  • Apply the Risk Management Framework (RMF) to support system accreditation and continuous monitoring activities.
  • Upload and maintain IA documentation and artifacts within eMASS.
  • Track, apply, test, and report STIG compliance using STIG checklists and Security Content Automation Protocol (SCAP) tools.
  • Document system management procedures, operating procedures, security concerns, and proposed solutions.
  • Support security readiness reviews and preparation of security checklists.
  • Provide software support for patching and compliance scanning activities.
  • Maintain software baselines to ensure IA compliance and perform monthly regressive compliance scanning, including ACAS scans and SCAP reporting.
  • Maintain records of applied patches and update associated documentation with software version information.
  • Anticipate and mitigate potential security risks affecting the software baseline.
  • Monitor and analyze systems and networks to assess risk and recommend policy improvements.
  • Coordinate hardware, software, and firmware changes with the ISSM and verify appropriate installation of security patches.
  • Document security concerns and remediation activities through whitepapers and Plans of Action & Milestones (POA&M).
  • Assist with Annual Security Reviews (ASRs) and Verification & Validation (V&V) activities.
  • Develop detailed test procedures and security configuration documentation in support of security test events.
  • Evaluate security controls, assess their impact on systems, and develop mitigation strategies where necessary.
Requirements:
  • 5 yrs experience supporting RMF-based ATO processes.
  • Hands-on experience with eMASS, STIGs, SCAP, and ACAS.
  • Knowledge of DoD cybersecurity policies, standards, and best practices.
  • Experience with patch management, vulnerability scanning, and compliance reporting.
  • Strong technical writing skills, including experience developing security documentation and POA&Ms.
  • Ability to analyze security controls and recommend effective mitigation strategies.
  • Strong communication and collaboration skills.
  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
  • Must have or be able to obtain a CompTIA Security Plus certification prior to start date.
  • Ability to obtain and maintain a security clearance.
  • Must be a U.S. Citizen.


About TRISTAR

TRISTAR is an SBA certified Service-Disabled Veteran-Owned professional services company supporting the U.S. Department of War programs. Our core competencies include Electronic Warfare, Enterprise Management, Full Spectrum Cybersecurity, Information Technology, Digital Transformation, Software Engineering and Development, Maritime Modernization and Engineering, and Technical Solutions.


TRISTAR was founded in March 1995 and has built an employee-focused collaborative environment which enables our team of professionals to create and deliver customized solutions to meet our customers’ mission critical challenges.


TRISTAR’s core capabilities support customers with end-to-end solutions. For over 30 years, TRISTAR has demonstrated and perfected our ability to successfully manage any task, small or large no matter how difficult or complex.


TRISTAR is proud to serve the Department of War and other Federal Agencies.


TRISTAR provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.