I

Insight Assurance

Cybersecurity compliance audits and assessments

Senior Security Control Assessor

Security Governance, Risk & CompliancePosted on Nov 13
Full-timeRemote in USANo salary listed

About the Job

Requirements

  • An active Certified Information Systems Security Professional (CISSP) certification is required.
  • At least one additional active certification from the A2LA-approved list is required: CASP+ CE, GCED, GCIH, GSLC, CISA, CISM, CCSP, CISSP-ISSAP, CISSP-ISSEP, CISSP-ISSMP, CFR, or CCISO. Holding only the CISSP can be supplemented by completing the BCR Cyber activity after hire.
  • A minimum of five years of auditing and/or assessment experience in security compliance frameworks is required.
  • Experience leading assessment engagements or mentoring assessors is required.
  • A bachelor's degree in Information Technology, Cybersecurity, or a closely related field, or equivalent experience, is required.
  • Deep knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-53A, FedRAMP baselines, and cloud security is required.
  • Working knowledge of cloud-native architecture across AWS, Azure, and GCP; Infrastructure as Code such as Terraform; CI/CD pipelines; and API-based evidence collection is required.
  • Ability to read scripts, queries, and Infrastructure as Code sufficiently to test automated validation is required.
  • Ability to assess complex cloud systems and maintain an independent position under client pressure is required.

Responsibilities

  • Lead assessments from planning through reporting, including SAP, SAR, and RET for Rev. 5; KSI-based reporting for FedRAMP 20x; and GovRAMP RAR, SR-SAP, and SR-SAR.
  • For FedRAMP 20x, test both each Key Security Indicator's security capability and its measurement system, including code review, API testing, and cloud architecture analysis; verify automated evidence runs at the stated cadence, covers the full scope, and is reproducible.
  • Review and validate findings against the FedRAMP Criteria for Document Acceptance and include the required authorization recommendation in each SAR.
  • Sign off on assigned assessments and escalate concerns about quality, evidence, or independence to the Technical Manager.
  • Serve as the primary contact for assessment communications with the client, record disagreements, and keep the assessment record separate from the provider's.
  • Lead the assessment team with the Project Manager and maintain staffing within A2LA minimums: Senior Assessor, Penetration Tester, and Junior Assessor.
  • Mentor, supervise, and evaluate Junior and Mid-Level Assessors, and help deliver internal training.
  • File the After Action Report within 30 days of engagement end, support A2LA witnessing, surveillance, and for-cause assessments, and report conflicts of interest promptly.
  • Do not design, select, or implement client remediation or provide advisory services or sales support to clients being assessed; findings must carry only the FedRAMP-required recommendation.
  • Do not assess clients that Insight Assurance advises or has advised, and disclose any prior relationship with an assigned cloud service provider.

Desired Qualifications

  • Other relevant security certifications, such as CGRC, ISO 27001 Lead Auditor, or AWS, Azure, or Google cloud security or architect certification; other certifications are reviewed for relevance.
  • Prior experience with FedRAMP, FISMA, or NIST SP 800-53 assessments is strongly preferred.
  • Prior 3PAO, GovRAMP, TX-RAMP, or FedRAMP 20x experience is preferred.
  • A master's degree in Information Technology, Cybersecurity, or a related discipline is preferred.

About the Company

Insight Assurance

Cybersecurity compliance audits and assessments

Insight Assurance provides IT compliance audits and cybersecurity assessments across frameworks such as SOC 1/2, ISO 27001, HIPAA, and PCI DSS. As a licensed CPA firm, PCI QSA, and ISO Certification Body, it conducts readiness assessments, independent audits, vulnerability scanning, and penetration testing. It combines expert services with compliance automation and AI, often partnering with Drata to streamline data collection and auditing for scalable results. Its goal is to simplify IT compliance and help organizations protect data and maintain customer trust through verified regulatory compliance.

Company size
51-200
Company stage
Not listed
Total funding
Not listed
Headquarters
Tampa, FL
Founded
2020

Recently Posted Jobs

Explore more opportunities at Insight Assurance

See more jobs