Auditing, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, CompTIA Security+, Computer Science, Document Management, Government, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Quality Assurance, Requirements Management, Risk Analysis, Risk Management, Security Analysis, Support Documentation, Technical Writing, U.S. National Institute of Standards and Technology (NIST), Writing Skills
Location: Remote
Employment Type: Contract / Project-Based
Position Summary
Judit Inc. is seeking NIST Security Controls Analysts to support cybersecurity risk assessments, compliance reviews, and control evaluations for government and regulated-industry clients.
The selected candidates will assist in reviewing technical and administrative controls, mapping findings to NIST requirements, maintaining assessment documentation, and supporting development of final deliverables.
This role is ideal for cybersecurity professionals with strong experience evaluating security controls and supporting formal assessment programs.
Key Responsibilities
- Review and analyze security controls and supporting documentation.
- Map assessment findings to NIST SP 800-53 control families.
- Support cybersecurity risk assessments and compliance reviews.
- Maintain assessment evidence repositories.
- Assist with risk scoring and control evaluation activities.
- Document findings and remediation recommendations.
- Support preparation of final reports and executive summaries.
- Participate in quality assurance reviews.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
- 5+ years of cybersecurity, information assurance, compliance, or audit experience.
- Hands-on experience with NIST SP 800-53.
- Experience supporting cybersecurity assessments or compliance reviews.
- Strong technical writing and documentation skills.
Preferred Certifications
- Security+
- CISA
- CISSP
- CAP
- CRISC
- CISM
Candidates must provide evidence of prior assessment experience, including:
- Project summaries.
- Assessment scope information.
- Control frameworks evaluated.
- Deliverables supported.
- Quantifiable outcomes and accomplishments.
- References or client validation when permissible.
Preferred Experience
- Government cybersecurity programs.
- NIST-based assessment initiatives.
- Risk management and compliance programs.
- Cybersecurity reporting and documentation.