1:00 PM - 2:00 PM
Senior Product Manager Interview
Sarah Jenkins
The demand for security control assessor remote jobs continues to rise as organizations across the USA strengthen their cybersecurity defenses. Currently, 500+ open positions are available for professionals ready to evaluate, test, and validate assessment frameworks across complex IT environments. This remote opportunity offers flexibility while contributing to vital national defense initiatives.
Successful candidates typically bring strong knowledge of NIST frameworks, risk management methodologies, and compliance standards such as FISMA and FedRAMP. Employers seeking to hire a security control assessor value expertise in vulnerability assessment, control testing, and clear technical documentation. Strong analytical thinking, attention to detail, and the ability to communicate findings to both technical and non-technical stakeholders are essential for thriving in this field.
Remote security control assessor positions in the USA are increasingly common as agencies and private companies adopt distributed teams to access top-tier cybersecurity talent nationwide. This arrangement allows professionals to collaborate with cross-functional teams, conduct assessments, and support continuous monitoring efforts from anywhere in the country. The growing emphasis on data protection and regulatory compliance continues to drive strong hiring momentum in this sector.
If you're ready to advance your career, explore the latest security control assessor vacancies available through Global Work AI. Take the next step toward a rewarding remote role where your expertise directly strengthens organizational resilience. Discover opportunities that match your skills and ambitions today.

AAFCPAS INC
Perform IT General Controls testing, conduct vulnerability assessments, and evaluate security configurations for various technologies. Support client engagements by documenting findings, developing recommendations, and preparing audit documentation.

Vultr
Lead a team of Physical Security Evaluators to conduct vulnerability and risk assessments across global data centers. Collaborate with building owners and operations teams to identify and mitigate physical security threats.
iCallidus
Perform system monitoring and vulnerability scans, develop and maintain security documentation, assist in incident response activities, support Security Control Assessments (SCAs), ensure compliance with security requirements, and document findings while maintaining logs.

Peraton
Maintain compliance with NIST SP 800-53 Rev. 5 and HIPAA through policy management, control testing, and gap analysis. Support audit readiness and manage the Plan of Action & Milestones (POA&M) lifecycle. Conduct vendor security assessments and manage ongoing compliance verification.

Dexis
Support the design, coordination, conduct, and reporting of Security Cooperation analyses. Provide qualitative and quantitative analysis of security cooperation programs, assist in developing indicators and metrics, draft reports and presentations, and design visual graphics.

Microsoft
Lead security assurance efforts including compliance, risk assessment, and vulnerability research. Collaborate with engineering teams to ensure security requirements are met and translate them into actionable controls.

Agile Defense
Design, implement, and maintain security solutions for enterprise systems, applications, networks, and data. Monitor security tools, conduct vulnerability assessments, support incident response, and ensure compliance with regulations.

Computer Integration Technologies, Inc.
Lead customer advisory relationships, conduct strategic reviews, and present recommendations to executives. Develop risk-based security roadmaps, conduct compliance assessments, and draft security policies.

Lifeway Christian Resources
Guide IT security governance, risk management, and compliance. Support third-party risk assessments and PCI compliance efforts. Conduct internal risk reviews and maintain security policies, standards, and procedures.

Tangent Technologies LLC
Conduct hands-on security control assessments for federal contracts, applying NIST SP 800-53 controls and the Risk Management Framework. Develop and review security assessment plans and reports, and coordinate with stakeholders to resolve evidence gaps.

Control Risks
Conduct physical intrusion Red Team assessments to evaluate client security response plans. Perform covert and overt assessments of technical and physical security infrastructure, including access control and surveillance systems.

Zscaler
Coordinate and execute federal certification and authorization activities, including compliance assessments with independent assessors. Drive continuous monitoring efforts and remediation of compliance obligations.

AGE Solutions
Conduct cybersecurity assessments and audits for DoD organizations, evaluate systems using cyber threat emulation, and perform vulnerability assessments. Document findings in eMASS, analyze security gaps, and provide mitigation recommendations.
Triumph Enterprises
Prepare and maintain authority to operate (ATO) packages under the VA risk management framework. Document security controls and gather control evidence. Support continuous monitoring and remediation tracking, and assist with Zero Trust data security governance as needed.

Sourcebooks
Build and manage the AI security review process, including risk assessments and documentation. Assess AI tools and manage their features, plugins, and APIs. Perform hands-on security validation and maintain security controls for the Citizen Developer program.

Safal Partners
Manage the security compliance program for a federal project website, including continuous monitoring, vulnerability management, access control, incident response, and contingency planning.

Bureau Veritas
Conduct QA/QC inspections of building systems including electrical, mechanical, and structural components. Perform building assessments, collect data, document findings, and prepare detailed reports.

Chainguard
Maintain and improve customer-facing security documentation, including security questionnaires and Trust Center content. Audit AI agents for accuracy and reliability, updating their knowledge and instructions as needed.

Bright Horizons
Manage and assess security and fraud needs, establishing a physical security and fraud prevention program. Conduct audits, direct site security initiatives, and design physical security systems. Identify and report on physical security risks, preparing assessments and planning documents.

Guidehouse
Conduct fraud risk assessments for clients, focusing on identity fraud challenges. Support ongoing assessments of risks in service integration with partner agencies.

ECI
Develop and implement cybersecurity risk management strategies for financial services and government clients. Conduct security assessments and gap analyses, advising on compliance with regulatory frameworks like NIST and ISO 27001.

SkyePoint Decisions
Implement security strategies for cloud environments, conduct cloud security assessments to identify vulnerabilities, and analyze cloud security requirements. Prepare compliance reports, execute Security Controls Test plans, and review cloud system artifacts for authorization to operate requests.

SkyePoint Decisions
Provide subject matter expertise for the Information System Security and Authorization program. Review and guide on Privacy Impact Assessments, Third Party Website and Applications, and system artifacts for ATO requests. Create and review ATO packages, ensuring compliance with RMF.

Chainguard
Maintain and improve customer-facing security documentation, including security questionnaires and Trust Center content. Audit AI agents for accuracy and reliability, updating their knowledge and instructions as needed.

Vultr
Conduct comprehensive physical security evaluations of data center facilities, documenting vulnerabilities and ensuring mitigation actions are implemented. Prepare evaluation reports and partner with security teams to review documentation.

ADRM
Lead the development and continuous improvement of security policies and risk assessment programs. Collaborate with client stakeholders and operational teams to identify vulnerabilities and evaluate risks.

Fortreum
Conduct security assessments for FedRAMP, PCI, ISO, and NIST-based frameworks. Collaborate with team members to perform technical tests, document assessment results, and prepare deliverables.

Emory University
Conduct security risk assessments for IT solutions, identifying and evaluating risks, and recommending remediation. Collaborate with various teams to ensure adherence to security safeguards and controls. Perform research on vulnerabilities and provide consultation to stakeholders.

Harris Computer
Advise business units on security requirements for certifications like SOC 2 and ISO 27001. Review security documentation for compliance and identify gaps needing remediation.

Pinkerton
Supervise and mentor a team of Area Access Management System Managers, ensuring consistent application of the Zero-Trust model and Principle of Least Privilege. Manage staffing, scheduling, and resource allocation while overseeing audits and remediation efforts.

CSCI Consulting
Design, implement, and maintain SAP security roles and authorizations across SAP environments. Administer SAP GRC Access Control for compliance and risk mitigation. Monitor SAP applications for security vulnerabilities and conduct security audits.

Dexis
Support DSCA with analyses using emerging AM&E techniques. Conduct field evaluations and provide technical guidance on AM&E. Manage AM&E projects and tasks, ensuring adherence to budget and travel regulations. Perform day-to-day research, analysis, and program support services.

Boston Government Services, LLC
Develop, review, and document instrumentation and control system designs for nuclear facilities. Evaluate and select controllers and instrumentation, and troubleshoot PLC logic using Allen-Bradley or Siemens platforms.

Pyramid Systems Inc
Support security and compliance of information systems and networks. Maintain System Security Plans and authorization documentation, conduct vulnerability scans, and monitor systems for compliance. Coordinate with stakeholders to resolve security findings and manage incident response activities.

Fortress Information Security
Review security assessments according to service level agreements and quality standards. Train and oversee less experienced staff, collaborate with internal partners and third parties to manage risks, and execute the Validated Controls Assessment (VCA) workflow.

Chainlink Labs
Develop and enhance automated security assurance workflows to minimize manual effort and improve consistency. Streamline the collection and analysis of security evidence to enhance audit readiness. Automate access reviews, control testing, and risk assessments to boost efficiency and accuracy.

Seneca Holdings
Conduct vulnerability assessments and scans, analyze findings, and recommend remediation strategies. Manage remediation efforts and compliance reporting, ensuring adherence to DoD/DoW frameworks and DISA STIGs.

Seneca Holdings
Support cybersecurity compliance and Risk Management Framework (RMF) activities, including system security authorization and continuous monitoring. Conduct risk assessments, manage access control, and track security vulnerabilities.

Digital Global Connectors
Evaluate and document identity lifecycle management processes, including provisioning and deprovisioning controls. Assess the effectiveness of identity governance and access controls, including Segregation of Duties (SoD) and privileged access governance.

Scotts Miracle-Gro
Oversee SAP security and governance, managing user provisioning, role administration, and access risk evaluations. Collaborate with technical specialists to build security configurations across various SAP modules.
10,000,000+ more jobs available!