Security Assessor/Analyst Lead

Guidehouse

. Lead security and privacy control assessments in accordance with established assessment plans, applicable standards, and client requirements .

Posted 10/27/2026full-timeMcLean • Virginia • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading security control assessments, developing security documentation, and advising stakeholders on risk implications. Proficient in NIST SP 800-53 controls and skilled in managing assessment teams while ensuring quality and consistency in deliverables.

Highest-signal resume keywords

Security Control AssessmentNIST SP 800-53Team LeadershipRisk AssessmentSecurity Documentation Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Control AssessmentRisk AssessmentSecurity Documentation DevelopmentEvidence EvaluationTechnical Configuration EvaluationQuality AssuranceAssessment MethodologiesData AnalyticsAutomation TechniquesCompliance Standards

Soft Skills

Communication SkillsCoachingMentoringProfessional JudgmentClient Advisory

Tools & Technologies

Assessment ToolsAutomation ToolsEvidence Collection ToolsReporting ToolsAI-Assisted Techniques

Industry Keywords

CybersecurityInformation SecurityTechnology RiskAuditAuthorization

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead security and privacy control assessments in accordance with established assessment plans, applicable standards, and client requirements
Supervise and provide day-to-day direction to teams of security assessors, including assignment of assessment activities, review of work products, quality assurance, coaching, and professional development
Lead assessment planning, execution, documentation, and reporting across multiple systems, workstreams, or client stakeholders
Review security documentation and technical evidence to evaluate the design, implementation, and operating effectiveness of security and privacy controls
Lead and participate in evidence inspection, architecture and system documentation review, interviews, working sessions, technical configuration evaluation, and implementation evidence validation
Lead development and quality review of SSPs, SARs, ISRAs, POA&Ms, and other risk, compliance, and authorization documentation
Articulate control deficiencies, security risks, root causes, and remediation considerations to technical and executive audiences
Maintain assessment independence, objectivity, and professional judgment
Advise client stakeholders on assessment results, risk implications, and opportunities to strengthen controls
Establish consistent assessment methodologies, templates, quality standards, and leading practices
Improve assessment efficiency and quality through standardization, tooling, automation, and enhanced evidence collection and validation
Support data analytics, AI-assisted techniques, and automation for assessment analysis, evidence traceability, reporting, and continuous monitoring
Mentor junior and mid-level security professionals and contribute to cybersecurity capability development and knowledge sharing

Requirements

What you’ll need

Minimum of FIVE (5) years of professional experience
Experience in cybersecurity, information security, technology risk, audit, security control assessment, authorization, or related disciplines
Minimum of THREE (3) years of supervisory or team leadership experience overseeing security assessor teams or security assessment-related personnel
Bachelor's Degree from an accredited university
US Citizenship is contractually required
Demonstrated experience leading or performing security control assessments, audits, risk assessments, or authorization activities
Hands-on experience developing and/or reviewing formal security assessment documentation, including SSPs, SARs, POA&Ms, ISRAs, or equivalent artifacts
Strong working knowledge of NIST SP 800-53 security and privacy controls and risk-based assessment concepts
Experience evaluating technical and procedural evidence to determine control effectiveness and identify security or compliance gaps
Experience leading interviews, assessment discussions, and working sessions with technical personnel, system owners, security teams, and other client stakeholders
Ability to translate complex technical and security issues into clear, concise, and defensible findings and recommendations
Demonstrated experience reviewing the work of other assessors and maintaining quality and consistency across assessment deliverables
Strong written and verbal communication skills, including the ability to communicate effectively with technical and senior client stakeholders
Ability to manage multiple assessment activities, priorities, and deliverables in a client-service environment

Benefits

Comp & perks

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend
Flexible benefits package