Senior Security Advisor – Lead Control Assessor
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Responsibilities:
- Lead and execute cybersecurity control assessments against a defined subset of key controls aligned to NIST SP 800-53 Rev. 5
- Assess control implementation status using standardized criteria and validation methodologies aligned to NIST SP 800-53A Rev. 5
- Test information systems through documentation review, system walkthroughs, and stakeholder interviews
- Determine evidence sufficiency and appropriateness using consistent judgment
- Lead assessment planning, kickoff, execution coordination, and closeout activities
- Coordinate assessment activities and task assignments across Control Assessors
- Serve as primary point of contact for client stakeholders during assessment engagements
- Review and approve assessment narratives, findings, and control determinations before quality assurance submission
- Ensure consistent execution across multiple clients to support trend analysis and benchmarking
- Enforce assessment methodologies, scope boundaries, and validation standards
- Address quality assurance feedback and ensure deliverable accuracy, clarity, and consistency
- Lead and participate in client interviews, system walkthroughs, and working sessions
- Communicate assessment scope, expectations, and evidence requirements to stakeholders
- Present assessment results, findings, and risk implications to executive leadership and board-level stakeholders
- Mentor and guide Control Assessors on assessment techniques, documentation standards, and professional judgment
- Escalate risks, issues, and control interpretation questions to program leadership
Requirements:
- 7+ years of industry experience in cybersecurity, information security, IT audit, or risk and compliance
- 2+ years of experience leading or performing cybersecurity control assessments or IT audits, with demonstrated responsibility for control testing and validation
- Bachelor’s degree in Information Security, Information Systems, Computer Science, or a related field, or equivalent professional experience
- Relevant professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent strongly preferred
- Proven experience testing and evaluating security controls aligned to NIST SP 800-53 Rev. 5
- Experience applying assessment procedures consistent with NIST SP 800-53A Rev. 5
- Experience executing repeatable, methodology-driven assessment programs across multiple organizations or systems
- Strong written and verbal communication skills, including experience presenting assessment results to executive and board-level audiences
- Maintains confidentiality and professionalism with sensitive client information
- Prolonged periods of being at a desk and working on a computer
- Majority of work time will be 9:00 AM EST to 5:00 PM EST
Benefits:
- Primarily remote work
- Flexibility in scheduling
- Periodic travel to client sites based on client needs
Similar Jobs
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Information Security Control Assurance Analyst
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.