Senior Security Advisor – Lead Control Assessor

Soteria - Security Solutions & Advisory

. Lead and execute cybersecurity control assessments against a defined subset of key controls aligned to NIST SP 800-53 Rev.

Posted 10/7/2026full-timeRemote • South Carolina • United StatesSenior💰 $110,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading cybersecurity control assessments aligned with NIST standards, ensuring quality and consistency across multiple clients. Proficient in communicating findings and risk implications to executive leadership while mentoring team members on assessment methodologies.

Highest-signal resume keywords

Cybersecurity Control AssessmentsNIST SP 800-53 Rev. 5NIST SP 800-53A Rev. 5CISSPCISM

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Control TestingValidation MethodologiesAssessment PlanningDocumentation ReviewSystem WalkthroughsStakeholder InterviewsQuality AssuranceRisk AssessmentEvidence EvaluationMethodology-Driven Assessment

Soft Skills

Strong Communication SkillsMentoringProfessional JudgmentClient EngagementTeam Coordination

Certifications & Qualifications

CISSPCISMCISACRISC

Industry Keywords

Information SecurityIT AuditRisk and ComplianceControl ImplementationAssessment Methodologies

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead and execute cybersecurity control assessments against a defined subset of key controls aligned to NIST SP 800-53 Rev. 5
Assess control implementation status using standardized criteria and validation methodologies aligned to NIST SP 800-53A Rev. 5
Test information systems through documentation review, system walkthroughs, and stakeholder interviews
Determine evidence sufficiency and appropriateness using consistent judgment
Lead assessment planning, kickoff, execution coordination, and closeout activities
Coordinate assessment activities and task assignments across Control Assessors
Serve as primary point of contact for client stakeholders during assessment engagements
Review and approve assessment narratives, findings, and control determinations before quality assurance submission
Ensure consistent execution across multiple clients to support trend analysis and benchmarking
Enforce assessment methodologies, scope boundaries, and validation standards
Address quality assurance feedback and ensure deliverable accuracy, clarity, and consistency
Lead and participate in client interviews, system walkthroughs, and working sessions
Communicate assessment scope, expectations, and evidence requirements to stakeholders
Present assessment results, findings, and risk implications to executive leadership and board-level stakeholders
Mentor and guide Control Assessors on assessment techniques, documentation standards, and professional judgment
Escalate risks, issues, and control interpretation questions to program leadership

Requirements

What you’ll need

7+ years of industry experience in cybersecurity, information security, IT audit, or risk and compliance
2+ years of experience leading or performing cybersecurity control assessments or IT audits, with demonstrated responsibility for control testing and validation
Bachelor’s degree in Information Security, Information Systems, Computer Science, or a related field, or equivalent professional experience
Relevant professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent strongly preferred
Proven experience testing and evaluating security controls aligned to NIST SP 800-53 Rev. 5
Experience applying assessment procedures consistent with NIST SP 800-53A Rev. 5
Experience executing repeatable, methodology-driven assessment programs across multiple organizations or systems
Strong written and verbal communication skills, including experience presenting assessment results to executive and board-level audiences
Maintains confidentiality and professionalism with sensitive client information
Prolonged periods of being at a desk and working on a computer
Majority of work time will be 9:00 AM EST to 5:00 PM EST

Benefits

Comp & perks

Primarily remote work
Flexibility in scheduling
Periodic travel to client sites based on client needs