JobCubby JobCubby
Sign up
CompQsoft, Inc.

Cybersecurity Assessor

CompQsoft, Inc. New York, New York, United States · $125K–$130K/yr

IT Services and IT Consulting · 501-1,000 employees

10 h ago
security Senior (5-10 yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Assess internal systems and third-party vendors for security risks and compliance, test technical and administrative controls, and document findings and POA&Ms. Coordinate with business and technical teams to prioritize remediation, maintain risk documentation and dashboards, and report on the organization’s security posture.

What they look for

Governance, Risk, And Compliance Security Control Auditing Third-Party Risk Assessment NIST SP 800-53 NIST SP 800-37 Security Impact Analysis Risk Management Framework POA&M Management Security Assessment Risk Documentation And Reporting Archer ServiceNow OneTrust Prevalent Power BI Advanced Excel

Requirements

Requires at least five years of experience in cybersecurity assessment, GRC, security control auditing, and third-party risk assessment, including familiarity with federal mandates such as NIST SP 800-53 and 800-37. Listed certifications include CISA, CRISC, CGEIT, CISSP, CompTIA Security+, CCSK, and CAP/ISC2 CGRC; relevant tools include Archer, ServiceNow, OneTrust, Prevalent, Excel, Power BI, Visio, and JIRA.

Full description

Description

The Cybersecurity Assessor evaluates enterprise systems, networks, and applications to identify vulnerabilities, assess risks, and ensure compliance with security policies and regulatory standards. They provide actionable recommendations and collaborate with technical and business teams to strengthen security controls and reduce organizational risk.

Key Requirements

  • Expertise in GRC methodologies, security control auditing, and third-party risk assessments. Proven ability to interpret federal compliance mandates (NIST SP 800-53, 800-37) and evaluate technical and administrative controls. Strong competency in conducting ""Security Impact Analyses"" and managing Plan of Action and Milestones (POA&M) documentation. Compliance & Assessment Support: Conduct security and compliance assessments across internal systems and third-party vendors, supporting adherence to organizational and regulatory requirements.
  • Third-Party Risk Assessments: Evaluate the security practices of external service providers and assist with managing vendor-related risks throughout the assessment of lifecycle.
  • Findings & Remediation Tracking: Analyze assessment results, document findings, and support remediation efforts by tracking issues and helping teams prioritize corrective actions.
  • Cross-Functional Coordination: Work with business and technical stakeholders to clarify compliance requirements and support the resolution of identified risks within accepted thresholds.
  • Risk Documentation & Reporting: Use risk management tools and reporting dashboards to maintain assessment documentation, track risk metrics, and contribute to security posture reporting.
  • Cross-Functional Synergy: Serve as a bridge between Business Analysts and Cybersecurity Engineers, translating compliance requirements into actionable remediation tasks while maintaining organizational risk thresholds.
  • GRC Tool Proficiency: Use industry-standard GRC platforms (e.g., Archer, ServiceNow) and Third-Party Risk tools (e.g., OneTrust, Prevalent) to centralize documentation and streamline assessment workflows.
  • Data-Driven Risk Reporting: Convert complex assessment findings into actionable insights with Power BI and Excel, maintaining dashboards that communicate enterprise security posture to stakeholders.
  • Security Control Execution & Validation: Perform daily RMF lifecycle control assessments, including evidence collection, walkthroughs, testing of technical/administrative controls, and POA&M tracking to ensure risk remains within tolerance.

Requirements

Experience: 5+ years

Certifications: CISA, CRISC, CGEIT, CISSP, CompTIA Security+, CCSK, CAP/ISC2 CGRC

Technologies: GRC Platforms (Archer/ServiceNow), Third-Party Risk Tools (OneTrust/Prevalent), MS Excel (Advanced), MS Power BI, MS Visio, JIRA, and Microsoft Office Suite.

CompQsoft provides equal opportunity in all aspects of employment and in the working environment to all employees and applicants. CompQsoft does not take any non-merit factors like race, color, religion, sex (gender), mental/physical disability, and age into account for purposes of recruitment, hiring and development

Similar roles