Date Posted: 01/27/2026
Hiring Organization: Rose International
Position Number: 496175
Industry: Utility
Job Title: Cyber Security Controls Assessor
Job Location: Oakland, CA, USA, 94612
Work Model: Hybrid
Work Model Details: The role is hybrid. onsite on a monthly basis
Employment Type: Temporary
FT/PT: Full-Time
Estimated Duration (In months): 11
Min Hourly Rate($): 65.00
Max Hourly Rate($): 70.00
Must Have Skills/Attributes: Analytical Skills, MS Excel, Project Management, Written Communication
Experience Desired: security framework and IT assessment process (3+ yrs); IT experience, including IT security or IT risk management experience (3+ yrs); NIST SP800-53, SP800-115, SOX, NERC CIP (3+ yrs)
Required Minimum Education: High School Diploma or equivalent
Preferred Education: Bachelor’s Degree
**C2C is not available**
Job Description
TOP THINGS:
Deep understanding of security framework and IT assessment process; detail oriented
Minimum Education:
• BA/BS in Computer Science, Business, or equivalent experience.
Minimum Required License / Certification:
At least one existing certification from the following list, which must be currently maintained and valid: certification:
• Cisco Certified Networking Associate (CCNA)
• Certified Information Systems Auditor (CISA);
• Certified in Risk and Information System Control (CRISC);
• Certified Internal Auditor (CIA);
• Certified Information Systems Security Professional (CISSP);
Desired License / Certification:
One or more current and valid certifications directly applicable or complementary to the role and area of expertise, including those listed above, as well as:
• Certified Ethical Hacker (CEH)
• Information Technology Infrastructure Library (ITIL)
• Microsoft Certified Professional/Security Engineer (MCP, MCSE)
• Cisco Certified Network Associate/Professional (CCNA, CCNP)
• Certified Information Security Manager (CISM)
• Project Management Professional (PMP).
Minimum On-the-Job Experience:
• Minimum of 3 years of general IT experience, including IT security or IT risk management experience
• Experience using Excel worksheets, workbooks, and formulas
• Experience managing multiple projects with conflicting priorities
Desired Experience:
• Utility Industry Experience
• Big 4 experience
• Demonstrated experience with Sarbanes Oxley or National Institute of Standards and Technology (NIST) SP800-53 security controls catalog.
Knowledge, Skills, and Abilities:
• Strong oral and written communication skills
• Strong analytical skills
• Understanding of application, database, network and systems security
• Understanding of general computing controls (GCCs)
• Able to identify complex control gaps.
• Understanding of generally applicable and accepted auditing standards and framework (e.g. COBIT) and best practices for IT services management (e.g., ITIL), regulatory standards and requirements (e.g. Sarbanes Oxley Act, NERC/CIP)
• Excellent planning, organizational, and project management skills
• Able to multi-task projects or assessments
• Ability to work with minimal supervision in a fast-paced environment
• Detail oriented
Position Summary
The Cyber Security Controls Assessment family is responsible for the assessment, verification, review, and audit of General Computer Controls across the enterprise. The Cyber Security Controls Assessor (“Assessor”) will be responsible for assessments which will require review and evaluation of IT and/or business systems and processes for compliance with defined regulatory standards, internal processes, and procedures. Additionally, the Assessor will be responsible for the identification of risks, evaluation of control deficiencies, and recommendation on remediation efforts consistent with IT organizational policies, standards, procedures, and regulatory requirements.
Duties and Responsibilities
• Perform multi-platform (application, database, operating system, middleware, monitoring tools, and business processes) level assessments based on predefined test objectives and test plans. Perform retest of controls that have been remediated or updated as a result of previously identified deficiencies.
Obtain, review, and interpret evidence provided to validate controls are performed effectively.
• Execute and report on results of IT Compliance assessments in accordance with industry best practices and established regulatory standards and requirements (e.g., NIST SP800-53, SP800-115, SOX, NERC CIP).
• Obtain, review, and interpret organizational IT policies, standards and procedures to identify control points that would assist in mitigating risk to the business.
• Review test results or interpret evidences to address vulnerabilities, gaps, or control deficiencies; work with stakeholders to establish plans for sustainable resolution.
• Identify risks associated with control failures and supports the identification of mitigating controls
• Partner with control owners to ensure control documentation is updated periodically to reflect current control environment
• Perform other tasks as necessary to ensure that the Compliance meets its commitments to customers
• Support the Compliance Sr. Manager/Manager as needed. - **Only those lawfully authorized to work in the designated country associated with the position will be considered.**
- **Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.**
Benefits:
For information and details on employment benefits offered with this position, please visit here. Should you have any questions/concerns, please contact our HR Department via our secure website.
California Pay Equity:
For information and details on pay equity laws in California, please visit the State of California Department of Industrial Relations' website here.
Rose International is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender (expression or identity), national origin, arrest and conviction records, disability, veteran status or any other characteristic protected by law. Positions located in San Francisco and Los Angeles, California will be administered in accordance with their respective Fair Chance Ordinances.
If you need assistance in completing this application, or during any phase of the application, interview, hiring, or employment process, whether due to a disability or otherwise, please contact our HR Department.
Rose International has an official agreement (ID #132522), effective June 30, 2008, with the U.S. Department of Homeland Security, U.S. Citizenship and Immigration Services, Employment Verification Program (E-Verify). (Posting required by OCGA 13/10-91.).
Thanks for the opportunity. If in the future I ever need a job, I would like to work for Rose International.
David, Consultant
It is a great pleasure being a part of the Rose International Team.
Toni, Consultant
The interactions that I have had with your representatives have always been prompt and very professional. I am very pleased and impressed with your company and services.
Sioe, Consultant
I believe the best thing that Rose HR has going for it is the incredible responsiveness. Everyone is very quick to reply to any concerns, and contacts the contracted employees very quickly and efficiently.
Kevin, Consultant
I had a very positive experience working for Rose. The entire process is very efficient and easy.
Joanne, Consultant
EMPLOYEE COMMENTS