Everforth ECS is seeking a Control Assessor to work in our Portland,OR office. Please Note: This position is contingent upon contract award.
The Control Assessor supports the execution of security and risk control assessments by evaluating the design, implementation, and operating effectiveness of technical, administrative, and operational controls. This role contributes to evidence-based evaluations that inform risk management, compliance, and remediation decisions.
The ideal candidate has hands-on cybersecurity, compliance, or assessment experience; understands control frameworks and assessment methodologies; and can perform structured control testing while collaborating with system owners, engineers, and business stakeholders.
Key Responsibilities
Control Assessment & Testing
- Perform assessments of security and risk controls across systems, applications, infrastructure, and business processes.
- Evaluate control implementation, design effectiveness, and operating effectiveness using approved assessment procedures.
- Execute control testing activities, including interviews, documentation reviews, technical validation, and evidence analysis.
- Collect, review, and validate assessment evidence to support defensible conclusions and findings.
Framework & Standards Alignment
- Assess controls against established frameworks, standards, and organizational baselines such as NIST, ISO, CIS, and applicable regulatory or contractual requirements.
- Map control implementation and evidence to applicable requirements, control objectives, and assessment criteria.
- Identify control gaps, weaknesses, strengths, and opportunities for improvement.
Analysis & Documentation
- Document assessment activities, evidence reviewed, testing approach, and results clearly and accurately.
- Develop or contribute to assessment findings, risk statements, and supporting narratives.
- Support development of remediation recommendations, corrective action plans, and follow-up assessment activities.
- Maintain assessment workpapers and artifacts in accordance with program quality and audit-readiness expectations.
Stakeholder Collaboration
- Work with system owners, engineers, security teams, and business stakeholders to understand control implementation and operational context.
- Clarify assessment requirements, evidence needs, and testing expectations with control owners and technical personnel.
- Support presentations, status updates, and briefings of assessment results as requested by assessment leads or program leadership.
Quality, Compliance & Risk Support
- Apply approved methodologies consistently to ensure assessment results are accurate, repeatable, and defensible.
- Escalate significant control gaps, evidence limitations, or risk concerns to assessment leadership.
- Support audit readiness, compliance reporting, risk register updates, and remediation tracking activities.
Continuous Improvement
- Assist with improving assessment methodologies, checklists, templates, tools, and reporting processes.
- Participate in lessons-learned activities, reassessments, and process improvement initiatives.
- Stay current with evolving cybersecurity requirements, control frameworks, assessment practices, and industry best practices.
- 3-5 years of experience in cybersecurity, risk management, compliance, audit, or control assessment roles.
- Experience executing formal control assessments, audits, compliance reviews, or security evaluation activities.
- Working knowledge of security control frameworks and assessment methodologies such as NIST, ISO, CIS, SOC, or organizational control baselines.
- Ability to analyze technical configurations, policies, procedures, diagrams, plans, and operational evidence.
- Strong written documentation skills, including the ability to develop clear findings, evidence summaries, and risk statements.
- Ability to communicate effectively with technical and non-technical stakeholders.
Skills Required
- 3-5 years of experience in cybersecurity, risk management, compliance, audit, or control assessment roles
- Experience executing formal control assessments, audits, compliance reviews, or security evaluation activities
- Working knowledge of security control frameworks and assessment methodologies
- Strong written documentation skills
- Ability to communicate effectively with technical and non-technical stakeholders
ECS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ECS and has not been reviewed or approved by ECS.
-
Healthcare Strength — ECS advertises multiple national-network medical plan options with HSA eligibility alongside dental and vision coverage. Coverage generally begins quickly and is paired with company-paid short- and long-term disability, adding stability to the health package.
-
Retirement Support — A 401(k) with Safe Harbor and immediate vesting on employer contributions is emphasized, with an employer match available. Access to an employee stock purchase plan via the parent company provides an additional savings avenue.
-
Parental & Family Support — Paid parental leave up to 30 days, adoption assistance, and other family-oriented leaves are highlighted. Feedback suggests these offerings add meaningful value beyond base pay for many roles.
ECS Insights
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries. ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies. Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
