Cybersecurity Controls Testing Analyst

Job Title: Cybersecurity Controls Testing Analyst

Duration: 6 months (possible for extension/conversion)

Location: 100% remote

Job Summary:

We are seeking a highly skilled Cybersecurity Controls Testing Analyst with hands-on experience in controls testing, evidence gathering, and administration of security tools. The ideal candidate will go beyond process reporting, actively engaging in control assessments, compliance validation, and threat mitigation.

Key Responsibilities:

• Analyze control sets and provide recommendations based on NIST Frameworks (NIST Risk Management Framework, NIST 800-53, NIST 800-37) and other regulatory requirements.
• Conduct hands-on testing of security controls, ensuring their effectiveness and alignment with compliance standards.
• Gather, assess, and manage evidence to validate the implementation of security controls.
• Administer and configure security tools to monitor and enforce controls, rather than just reporting on processes.
• Analyze datasets, build dashboards, and design reporting mechanisms to establish metrics for compliance and risk management-particularly for DLP platforms (Netskope, McAfee, Varonis, Cisco ESA).
• Conduct threat hunting activities to proactively identify potential threats and vulnerabilities across enterprise environments.
• Work cross-functionally with security, IT, and compliance teams to ensure continuous monitoring and enhancement of cybersecurity controls.

• A Certified Information Systems Security Professional (CISSP) certification required upon offer.

• 3+ years of hands-on experience in cybersecurity controls testing, compliance, or security operations.
• Strong knowledge of NIST frameworks and other cybersecurity regulatory requirements.
• Experience with DLP platforms (Netskope, McAfee, Varonis, Cisco ESA) and ability to extract insights from security logs.
• Proficiency in data analysis, dashboard creation, and reporting for compliance metrics.
• Hands-on experience with threat hunting and vulnerability identification.
• Ability to administer security tools and validate control effectiveness beyond just reporting on processes.
• Strong analytical, communication, and problem-solving skills.

If you have a proactive mindset, hands-on cybersecurity experience, and a passion for controls testing, we encourage you to apply.