ZipRecruiter

Log In

1

Security Controls Assessor Jobs (NOW HIRING)

KBR, Inc.

Title: Sr. Cybersecurity Engineer Security Controls Assessor Representative Belong. Connect. Grow. with KBR! KBR's National Security Solutions team provides high-end engineering and advanced ...

previous page

Showing results 41-60

All JobsSecurity Controls Assessor Jobs

Security Controls Assessor information

See salary details

$8

$58

$78

How much do security controls assessor jobs pay per hour?

As of Aug 7, 2026, the average hourly pay for security controls assessor in the United States is $58.77, according to ZipRecruiter salary data. Most workers in this role earn between $50.48 and $68.03 per hour, depending on experience, location, and employer.

What is a security controls assessor?

Security Controls Assessors are professionals responsible for evaluating and validating the effectiveness of security controls within an organization's information systems. They conduct assessments to ensure compliance with regulatory standards, such as NIST, FISMA, or other security frameworks. Their work helps organizations identify vulnerabilities, manage risks, and maintain the confidentiality, integrity, and availability of critical data. Security Controls Assessors often provide recommendations for remediation and support efforts to achieve or maintain security certifications.

What are the key skills and qualifications needed to thrive as a security controls assessor, and why are they important?

To thrive as a Security Controls Assessor, you need expertise in information security frameworks, risk assessment methodologies, and compliance requirements, often supported by a degree in cybersecurity or related fields and certifications like CISSP, CISA, or CAP. Familiarity with tools such as vulnerability scanners, security assessment platforms, and compliance management systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and clearly report findings to stakeholders. These skills ensure that organizations maintain robust security postures and meet regulatory requirements to protect critical assets.

What are some common challenges security controls assessors face when evaluating compliance across multiple systems?

Security Controls Assessors often encounter challenges with inconsistent documentation, varying system configurations, and differing interpretations of compliance standards across departments. Coordinating with multiple teams to collect evidence and clarify control implementations can be time-consuming, especially in large organizations. Staying current with evolving regulations and ensuring all systems meet the latest requirements also demands continuous learning and adaptability. Building strong communication channels with system owners and IT staff helps overcome these hurdles and ensures thorough, accurate assessments.

What does a security controls assessor do?

A security controls assessor (SCA) evaluates the security controls within network systems to identify vulnerabilities and recommend actions to correct problems, working either alone or as part of a team. As a security controls assessor, your duties begin with conducting an in-depth assessment of the management, operations, and technical security controls. You must analyze information and prepare reports describing the vulnerability level of the network with specific detail as to what compromises data systems. You then develop a plan to address vulnerabilities and continue to monitor the security of network systems.

What is the difference between Security Controls Assessor vs Security Analyst?

AspectSecurity Controls AssessorSecurity Analyst
CertificationsISO 27001 Lead Auditor, CISSP, CISACISSP, Security+
Work EnvironmentAssessing security controls, compliance auditsMonitoring security systems, incident response
Employer & IndustryGovernment agencies, compliance firmsCorporate IT, cybersecurity teams

The Security Controls Assessor primarily evaluates and verifies security controls for compliance, often in government or regulated environments. In contrast, a Security Analyst focuses on monitoring, analyzing, and responding to security threats within organizations. While both roles require security certifications and involve cybersecurity, their core responsibilities and work settings differ significantly.

More about Security Controls Assessor jobs
What cities are hiring for Security Controls Assessor jobs? Cities with the most Security Controls Assessor job openings:
What are the most commonly searched types of Security Controls Assessor jobs? The most popular types of Security Controls Assessor jobs are:
Who are the top companies hiring for Security Controls Assessor jobs? The top employers for Security Controls Assessor jobs are:
What states have the most Security Controls Assessor jobs? States with the most job openings for Security Controls Assessor jobs include:
What job categories do people searching Security Controls Assessor jobs look for? The top searched job categories for Security Controls Assessor jobs are:
What are popular job titles related to Security Controls Assessor jobs? For Security Controls Assessor jobs, the most frequently searched job titles are:
Security Controls Assessor jobs near you
Infographic showing various Security Controls Assessor job openings in the United States as of August 2026, with employment types broken down into 85% Full Time, 5% Part Time, 5% Temporary, and 5% Contract. Highlights an 86% In-person, and 14% Remote job distribution, with an average salary of $122,236 per year, or $58.8 per hour.

Senior Security Controls Assessor with Security Clearance

ECS

Hampton, VA • On-site

$160K - $190K/yr

Other

Posted 14 days ago

Job description

Job Description Everforth ECS Federal is seeking a Senior Security Controls Assessor to work remotely . Everforth ECS is seeking a Senior Security Controls Assessor who lives in close proximity to the National Capital Region (NCR) to join a premier, enterprise-scale cybersecurity program supporting a major federal civilian agency. This is a full-time position that is available immediately for a qualified candidate. As a Security Controls Assessor , you will support the assessment, authorization, and continuous monitoring of federal information systems in accordance with the NIST RMF, IRS Publication 1075, and applicable federal security and privacy requirements. Working closely with system owners, security personnel, and agency stakeholders, you will assess controls, identify compliance gaps, and deliver actionable recommendations that reduce risk across the enterprise. Position Responsibilities: * Support the review, assessment, and maintenance of Security Assessment and Authorization (SA&A) artifacts, including: * IRS Publication 1075 artifacts * FIPS 199, PTA, PIA * NIST SP 800-60 Digital Identity documentation * System Security Plans (SSPs) * Security Assessment Plans (SAPs) and Security Assessment Reports (SARs) * Information System Contingency Plans and Contingency Test Plans * Plans of Action & Milestones (POA&Ms) * Analyze hardware/software inventories, network diagrams, data flow diagrams, system change requests, vulnerability scan results, and test reports to evaluate control effectiveness and identify gaps. * Develop and deliver enterprise-specific implementation guidance to help system owners achieve and maintain compliance with NIST SP 800-53 , IRS Publication 1075, agency-specific control overlays . * Present assessment findings, control deficiencies, and remediation recommendations to both technical teams and non-technical stakeholders in a clear, actionable format. * Review, update, and maintain information security policies, standards, and procedures to ensure alignment with federal regulations and agency requirements. * Conduct stakeholder interviews to document procedures and validate the implementation of security and privacy controls. * Analyze federal legislation, OMB mandates, and NIST guidance to identify required policy updates and inform program improvements. * Research emerging technologies and threats to support the development of current, effective security and privacy policies, standards, and procedures. * Serve as a trusted liaison between client personnel and assessment teams, facilitating clear communication and timely issue resolution. * Assist in the development and continuous improvement of a comprehensive enterprise information security and privacy program grounded in the latest laws, regulations, and industry best practices. Salary Range: $160,000-190,000 Required Skills * Active Public Trust clearance, or the ability to obtain and maintain one. * U.S. Citizenship required . * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent professional experience. * One of the following certifications or equivalent certifications preferred: * Certified Information Systems Security Professional ( CISSP ) * Certified Information Security Manager ( CISM ) * Certified Information Systems Auditor ( CISA ) * 7+ years of hands-on experience conducting security control assessments and supporting Assessment & Authorization (A&A) activities within federal environments. * Remote but within close proximity to the NCR. * Deep knowledge of NIST SP 800-53, NIST RMF, IRS Publication 1075, FedRAMP, OMB, and DHS compliance standards and requirements. * Demonstrated experience planning and leading security control assessments as a senior team member. * Proven ability to translate complex technical findings into clear, non-technical language for executive and stakeholder audiences. * Strong written and verbal communication skills, with a track record of producing high-quality federal security documentation. Desired Skills * In-depth understanding of the NIST RMF and its application across the system lifecycle. * Experience drafting and reviewing Privacy Impact Assessments (PIAs) and other privacy program artifacts. * Familiarity with federal identity and access management standards, including NIST SP 800-63 Digital Identity Guidelines. * Experience supporting continuous monitoring programs and POA&M remediation tracking. * Ability to provide strategic guidance that enhances and optimizes an agency's overall information security posture. #EverforthECS1 ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. is the federal segment of , a $4B global organization with over 10,000 employees . Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We value: * Attracting and developing top talent and high-performing teams * Fostering a culture that is engaging, accountable, and mission-driven Meet the challenge. Make a difference with Everforth ECS!

Apply