security assessor

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Security Control Assessor &ndash; Job Description</h1>
Position Title: Security Control Assessor 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Overview</h2>
The Security Control Assessor (SCA) shall provide cybersecurity assessment, authorization, and compliance support services for the U.S. Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Conduct independent security control assessments in accordance with NIST SP 800-53 Rev. 5 and NIST SP 800-53A methodologies.</li><li>
Evaluate management, operational, and technical security controls for federal information systems and cloud environments.</li><li>
Support the SBA Risk Management Framework (RMF) lifecycle including assessment, authorization, continuous monitoring, and ongoing authorization activities.</li><li>
Develop and maintain Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, risk findings, and remediation recommendations.</li><li>
Review and validate cybersecurity documentation including System Security Plans (SSPs), Configuration Management Plans (CMPs), Incident Response Plans, ISCPs, and architecture diagrams.</li><li>
Perform vulnerability assessment validation activities and verify remediation efforts for identified weaknesses and deficiencies.</li><li>
Support Information System Continuous Monitoring (ISCM) activities and ongoing authorization (OA) evaluation support.</li><li>
Assess compliance with FISMA, OMB Circular A-130, NIST guidance, FedRAMP requirements, and agency-specific cybersecurity policies.</li><li>
Support audit readiness activities for Inspector General (IG), GAO, FISMA, and internal cybersecurity audits.</li><li>
Assist with High Value Asset (HVA) assessment support activities in alignment with CISA and OMB guidance.</li><li>
Coordinate with ISSOs, ISSMs, system owners, and engineering teams to evaluate cybersecurity risks and remediation strategies.</li><li>
Support enterprise vulnerability management and risk reporting activities.</li><li>
Participate in cybersecurity governance meetings, compliance reviews, and technical assessment briefings.</li><li>
Document assessment findings, technical analysis, and recommendations with clear and concise reporting suitable for executive and technical stakeholders.</li><li>
Support development of cybersecurity metrics, dashboards, and compliance reporting artifacts.</li><li>
Ensure all assessment deliverables are peer reviewed, Section 508 compliant, and delivered in accordance with SBA-defined quality standards and timelines.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or related field.</li><li>
Minimum of six (6) years of experience supporting federal cybersecurity assessment, compliance, RMF, or security authorization activities.</li><li>
Minimum of four (4) years of experience conducting security control assessments, vulnerability assessments, or cybersecurity compliance evaluations.</li><li>
Demonstrated expertise in NIST RMF processes, NIST SP 800-53 Rev. 5, NIST SP 800-53A, and FISMA compliance requirements.</li><li>
Experience developing Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, and related accreditation documentation.</li><li>
Experience supporting continuous monitoring, ongoing authorization (OA), and cybersecurity audit activities.</li><li>
Knowledge of FedRAMP security assessment and continuous monitoring requirements.</li><li>
Experience using cybersecurity assessment, vulnerability management, and governance/risk/compliance (GRC) tools.</li><li>
Strong analytical, technical writing, and communication skills.</li><li>
Relevant cybersecurity certifications such as CAP, CISSP, CISA, Security+, CEH, or equivalent preferred.</li><li>
Ability to obtain and maintain a Moderate Risk background investigation and eligibility for higher-level clearances if required.</li></ul><h2 class="jobSectionHeader">
Desired Experience</h2><ul><li>
Experience supporting civilian federal agencies such as SBA, DHS, or CISA.</li><li>
Experience supporting FedRAMP cloud environments including Microsoft Azure, AWS, Microsoft 365, and SaaS platforms.</li><li>
Experience supporting enterprise cybersecurity metrics, dashboards, and automated compliance reporting.</li></ul>
PZHe7BkzAJ</div>

SBA - Security Control Assessor

Booz Allen Hamilton

<div>Security Control Assessor
The Opportunity:
As a systems security and network security engineer, you will identify the appropriate tools, systems, and applications needed to assess vulnerabilities and recommend the best solution and security strategy.
On our team, you&rsquo;ll assess a variety of network and security devices and applications in accordance with NIST 800-53 and NIST 800-37 standards. You&rsquo;ll use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience, you&rsquo;ll assess security threats and implement infrastructure controls.
In this role, you&rsquo;ll have impact on the mission by supporting accreditation and authorization packages for both new and existing systems. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.
What You&rsquo;ll Work On:<ul><li>
Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.</li><li>
Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.</li><li>
Perform risk and vulnerability assessments in network, system, and application areas.</li><li>
Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.</li></ul>
Join us. The world can't wait.
You Have:<ul><li>
Experience utilizing NIST 800-53 security controls</li><li>
Experience with NIST 800-37 Risk Management Framework (RMF) requirements</li><li>
Experience supporting system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&amp;Ms)</li><li>
Experience monitoring system security posture and identifying risks, vulnerabilities, and compliance gaps</li><li>
Experience tracking and managing POA&amp;Ms and coordinating remediation activities with system stakeholders</li><li>
Experience assessing the security impact of system changes and supporting configuration and change management processes</li><li>
Experience preparing systems for security assessments, audits, and Authorizing Official reviews</li><li>
Ability to support continuous monitoring activities, including vulnerability management and security reporting, and serve as a security liaison between system teams, cybersecurity operations, and governance bodies</li><li>
Top Secret clearance</li><li>
HS diploma or GED and 8+ years of experience with Information Assurance (IA), or Bachelor&rsquo;s degree and 5+ years of experience with Information Assurance (IA)</li></ul>
Nice If You Have:<ul><li>
Experience with operational technology and industrial control systems</li><li>
Master&rsquo;s degree in Information Systems</li><li>
CompTIA Advanced Security Practitioner (CASP) or Certified Information Systems Security Professional (CISSP) Certification</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Security Control Assessor

Procellis Technology

<div>Job Title: CMMC Certified Assessor (CCA)
Company: Procellis Technology, Inc.
Employment Type: Full-Time
Compensation Range: $120K + depending on qualifications, assessment experience, and consulting background, plus benefits and performance incentives.
Location: Remote with 10% travel within the U.S. for onsite assessments, client workshops, or validation activities.
**Must be a US Citizen** This position is not eligible for OPT/CPT sponsorship.
Key Responsibilities
Assessments:<ul><li>
Participate as a CMMC Certified Assessor (CCA) in official CMMC assessments for Procellis, and Procellis C3PAO partners.</li><li>
Review, validate, and document compliance artifacts including SSPs, POA&amp;Ms, security policies, and technical evidence.</li><li>
Conduct stakeholder interviews, review control implementations, and determine compliance status for required practices and processes.</li><li>
Communicate assessment results effectively to technical and executive audiences, including C-suite and compliance leadership.</li><li>
Submit accurate and complete assessment documentation.</li><li>
Participate in post-assessment analysis meetings as required.</li></ul> 
Consulting:
<ul><li>Perform CMMC consulting and preparation activities to support successful OSC certification.</li><li>
Provide clear, detailed assessment reports, identifying findings, risks, and actionable recommendations for remediation.</li><li>
Assist in scoping, developing and editing client documentation. Build and organize client SSPs and supporting artifacts in alignment with the CMMC Assessment Process (CAP) to support efficient assessments.</li><li>
Collaborate with client teams (Executive, IT, InfoSec, Risk, Audit) to build and execute remediation plans that support certification readiness aligned with client goals.</li></ul>
Misc:<ul><li>
This is a dual-capacity role supporting both CMMC consulting engagements and formal CMMC assessment activities based on operational demand.</li><li>
Stay current with evolving DoD cybersecurity requirements, CMMC 2.0 program updates, and related standards.</li><li>
Maintain professional certifications and ongoing CCA eligibility.</li><li>
Contribute to continuous improvement of the company's CMMC client preparation and/or assessment methodology and templates.</li><li>
Ability to travel to OSC locations to verify physical controls as needed (1-2 days per month)</li><li>
Must maintain a valid driver's license and clean driving record.</li></ul> 
Required Qualifications:<ul><li>
Must have an active T3 clearance.</li><li>
Active CMMC Certified Assessor (CCA) credential issued by The Cyber AB or ISACA.</li><li>
Note: Exceptional CCP candidates with an active T3 clearance and a scheduled CCA examination within 60 days may be considered. Employment offers for CCP candidates will be contingent upon successful attainment of the CCA credential within the agreed time frame.</li><li>
U.S. Citizenship (Required for DOD-related engagements).</li><li>
5+ years of professional experience in cybersecurity, compliance, or audit within regulated or defense-related environments.</li><li>
In-depth understanding of CMMC 2.0, NIST SP 800-171/172, and DFARS 252.204-7012/7019/7020 requirements.</li><li>
2+ years Proven experience conducting technical security assessments, gap analyses, and compliance reviews.</li><li>
Demonstrated experience participating in security assessments, compliance audits, or formalized control validation activities within regulated environments.</li><li>
Strong analytical, organizational, and communication skills.</li><li>
Strong ability to communicate technical and compliance concepts clearly to executive, operational, and technical stakeholders.</li><li>
Ability to manage multiple concurrent assessments and client engagements independently.</li></ul> 
Preferred Qualifications:<ul><li>
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related discipline (or equivalent work experience).</li><li>
Additional certifications such as CISSP, CISM, CISA, CAP, or Security+</li><li>
2+ years' experience working in a client facing role.</li><li>
Experience working for or with a C3PAOs.</li><li>
Familiarity with government cloud environments (e.g., Microsoft GCC High, AWS GovCloud).
Procellis supports ongoing professional development and advancement opportunities for high performing team members. Candidates are expected to advance into Lead CCA roles, Assessment Team Lead positions, or Consulting Practice Leadership as our practice continues to scale. Come grow with us!</li></ul></div>

CMMC Certified Assessor (CCA)

Fortinet

<div>Responsibilities:
Customer Engagements : Collaborate with clients to understand their security needs and objectives. Lead and deliver Red Team and penetration testing engagements, ensuring high-quality results that align with customer expectations.
Red Team Operations : Plan and execute realistic and sophisticated Red Team operations to simulate advanced cyber threats. Mimic adversary tactics, techniques, and procedures (TTPs) to identify and exploit vulnerabilities in client environments.
Penetration Testing : Conduct thorough penetration tests on client systems, networks, and applications. Provide actionable insights and recommendations for remediation based on identified vulnerabilities.
Technical Expertise: Demonstrate proficiency in a variety of offensive security tools and techniques. Stay current with industry trends, emerging threats, and advancements in offensive security methodologies.
Documentation and Reporting : Document all testing procedures, findings, and recommendations in clear and concise reports. Communicate technical details effectively to both technical and non-technical stakeholders as well as provide proactive guidance on improving an organization&rsquo;s security posture.
Required Skills :
<ul><li>Excellent written and verbal communication skills &ndash; English
</li><li>Experience developing and conducting red team and penetration testing engagements
</li><li>Experience performing application security assessments
</li><li>Public speaking experience at known security conferences is a plus
</li><li>Capable of performing assessments with common offensive toolsets as well as the ability to build custom tools and implants
</li><li>Solid knowledge of scripting languages such as Python, Perl, PowerShell, Ruby
</li><li>Development experience using C, C++, .NET, Java, Go
</li><li>Solid understanding of Active Directory and Azure AD
</li><li>Experience carrying out vulnerability assessments, physical assessments, wireless assessments, and social engineering campaigns.
</li><li>Strong understanding of operating system internals and endpoint security controls such as EDR and various evasion techniques
</li></ul>Qualifications:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 8 - 10+ years&rsquo; experience in Attack and Penetration testing roles
</li><li>Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.
</li></ul>#LI-BG1</div>

Senior Offensive Security Consultant – FortiGuard Proactive Services

Elevenlabs

<div><h2 class="jobSectionHeader">About ElevenLabs</h2>
ElevenLabs is an AI research and product company transforming how we interact with technology.
We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $11B - multiples of 11, always. 
 
We have expanded from voice into three main platforms:<ul><li>
ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale.</li><li>
ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages.</li><li>
ElevenAPI gives developers access to our leading AI audio foundational models.</li></ul>
Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you.<h2 class="jobSectionHeader">
How we work</h2><ul><li>
High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy.</li><li>
Impact not job titles: We don&rsquo;t have job titles. Instead, it&rsquo;s about the impact you have. No task is above or beneath you.</li><li>
AI first: We use AI to move faster with higher-quality results. We do this across the whole company&mdash;from engineering to growth to operations.</li><li>
Excellence everywhere: Everything we do should match the quality of our AI models.</li><li>
Global team: We prioritize your talent, not your location.</li></ul><h2 class="jobSectionHeader">
What we offer</h2><ul><li>
Innovative culture: You&rsquo;ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what&rsquo;s possible.</li><li>
Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities.</li><li>
Learning &amp; development: ElevenLabs proactively supports professional development through an annual discretionary stipend.</li><li>
Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose.</li><li>
Annual company offsite: Each year, we bring the entire team together in a new location - past offsites have included Croatia and Italy.</li><li>
Co-working: If you&rsquo;re not located near one of our main hubs, we offer a monthly co-working stipend.</li></ul><h2 class="jobSectionHeader">
About the Role</h2><ul><li>
Collaborating across teams to maintain US Government compliance certifications and frameworks such as GovRAMP, FedRAMP, CJIS and CMMC.</li><li>
Helping to shape ElevenLabs&rsquo; Enterprise offering towards regulated industries such as Local and State Government, Defense and Finance.</li><li>
Building technical documentation to demonstrate our compliance to our customers throughout the stack.</li><li>
Assisting the sales team by responding to client security requests and managing compliance-related queries.</li><li>
Conduct risk assessments based on CIS or NIST frameworks, document findings, and help teams achieve compliance efficiently.</li><li>
Enhance compliance as code tooling to automate monitoring, reporting, and reduce friction for other teams to remain compliant.</li></ul><h2 class="jobSectionHeader">
Requirements</h2><ul><li>
Experience in completing vendor security assessments and client security questionnaires in highly regulated industries, such as Government and Defense in the US.</li><li>
Strong technical expertise in managing and executing compliance, with hands-on experience using compliance management tools (e.g. Vanta).</li><li>
Proven ability to maintain and acquire certifications while managing audit readiness and documentation.</li><li>
Experience collaborating with cross-functional teams (sales, engineering, legal) to effectively communicate compliance requirements and ensure smooth operations.</li><li>
Experience with public cloud compliance (AWS, GCP, Azure) and automating compliance in cloud environments.</li><li>
Familiarity with integrating compliance tools into CI/CD pipelines to automate monitoring and reporting.</li></ul><h2 class="jobSectionHeader">
Location</h2>
This role is remote-first, so it can be executed from anywhere in the United States, with the ability to operate in GMT-5 timezone required. If you prefer, you can work from our offices in New York or San Francisco.</div>

Compliance Engineer - US

Roots care home health services

We are looking for qualified Internal Quality Assurance &amp; Assessor Officer (CAVA) to join our company in Dubai.Assessor (CAVA) Requirements:<ul><li>Level 3 Award in Assessing Competence in the Work Environment</li><li>Level 3 Award in Understanding the Principles and Practices of Assessment</li><li>Level 3 Award and Certificate in Assessing Vocational Achievement</li><li>A1 or D32/D33</li></ul>IQA-Internal Quality Assurance Requirements:<ul><li>Level 4 Award and Certificate in Leading the Internal Quality Assurance of Assessment Processes and Practice</li><li>V1 Conduct internal quality assurance of the assessment process</li><li>D34 Internally verify the assessment process</li></ul>Duties:<ul><li>Willing to work remotely or full time</li></ul>Salary &amp; Benefits:<ul><li>AED 2,500 to 4,000 depending on work conditions</li><li>Benefits as per UAE Labour Law</li></ul>Job Location:Port Saeed, Dubai, UAEJob Types: Full-time, Part-time, Contract, Permanent, Fresher Contract length: 24 monthsPay: AED2,500.00 - AED4,000.00 per monthExpected hours: 48.0 per weekLicense/Certification:<ul><li>Level 4 Award and Certificate in Internal Quality Assurance (Preferred)</li><li>Level 3 Award and Certificate in Assessor (Preferred)</li><li>A1, D32/D33 or V1 conduct or D34 verify (Preferred)</li></ul>Work Location: Hybrid remote in Port Zayid

Internal Quality Assurance & Assessor Officer (CAVA)

<div>Title:
PSAB ESS: HVAC Technician (Secret Clearance)
Belong, Connect, Grow, with KBR!
Program Summary
Under the AFCAP V Program, KBR supports the U.S. Air Force by providing Engineering Support Services to the 378 ECES. These services ensure mission-critical Installation Engineering, Asset Management and Visibility, and Real Property support to the 378 AEW. In addition to Engineering Support Services at Prince Sultan Air Base, KBR also provides food services and other quality-of-life support to sustain base operations.
Job Summary
The HVAC Technician supports facilities mechanical and HVAC asset visibility, condition assessment execution, and sustainment requirements planning through SMS BUILDER. This role supports the BIAT function and Sub-AMP services by ensuring HVAC-related inventories and assessments meet required completeness and currency thresholds and by advising on preventive/corrective maintenance strategies.
Roles and Responsibilities
<ul><li>Perform HVAC system condition assessments and inventory validation in SMS BUILDER</li><li>
Support maintenance-based assessments during PM where applicable and document updates per work closeout rules</li><li>
Identify inventory/assessment discrepancies and correct within required timelines</li><li>
Provide system-level recommendations to Sub-AMP/AMP leadership for requirement prioritization and investment planning</li><li>
Participate in Sub-AMP working groups and support the development/balancing of PM plans and CM strategies</li><li>
Support data quality standards and assist with quarterly reviews of shop data entry quality/timeliness</li><li>
Coordinate with Operations Flight shops on work task grouping and deconfliction for WRRB submissions</li></ul>
Basic Qualifications
<ul><li>Must be a U.S. Citizen with a current U. S. Driver's License.</li><li>
Must possess passport book (not passport card) with at least 13 months of remaining validity AND 6 blank visa/stamp pages remaining</li><li>
Must have and maintain a valid U. S. SECRET Security Clearance</li><li>
Must be able to read, write, speak and understand English fluently</li><li>
Candidate must also meet CENTCOM MOD-15 theater requirements.</li><li>
Air Force minimum 5-level (or equivalent) and 5+ year&rsquo;s experience in structures trade</li><li>
AFIT required: WENG 200, WENG 440, WMGT 231, WMGT 417</li><li>
Experience executing inspections/assessments and documenting findings accurately</li><li>
Ability to obtain/maintain access required for role-based SMS activities (assessor/read-only as assigned)</li></ul>
Preferred Qualifications<ul><li>
Experience with building automation systems and facility mechanical rooms</li><li>
BUILDER assessor experience (BRED import/export familiarity is a plus)</li><li>
Experience supporting KPI-driven sustainment programs</li></ul>
KBR Benefits
KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&amp;D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.</div>

PSAB ESS: HVAC Technician (Secret Clearance)

Search 8618+ Security assessor jobs near you this May. New roles added regularly across leading industries. Apply today.