Security Specialist - Security Controls Management

Job Posting End Date 09-19-2026 Please note the job posting will close on the day before the posting end date. Job Summary Security Controls Specialist is an individual contributor responsible for assessing, monitoring, and improving the effectiveness of cybersecurity controls across the organization. This role partners with Technology, Security, Compliance, Audit, and business stakeholders to identify and mitigate risk, evaluate control performance, support regulatory compliance efforts, and strengthen the organization's overall security posture.

The position performs risk-based assessments, develops and maintains control documentation, evaluates control effectiveness, supports audit readiness activities, and drives continuous improvement initiatives through automation, metrics, and operational reporting. The Security Specialist serves as a trusted advisor to stakeholders by translating security requirements into practical, business-focused risk management solutions.

Job Description What You’ll Do: Essential Job Functions & Tasks: Security Controls Management: Execute and maintain administrative, technical, operational, and detective security controls to ensure consistent performance and regulatory compliance. Evaluate and assess the effectiveness of administrative, technical, operational, and detective security controls. Perform control testing, validation, and monitoring activities to verify compliance with established security requirements.

Develop, maintain, and enhance control procedures, standards, and supporting documentation. Identify control gaps, weaknesses, or deficiencies and recommend appropriate remediation strategies. Support implementation of new controls and enhancements to improve operational efficiency and risk reduction. Collaborate with business and technology teams to ensure controls remain effective as systems and processes evolve.

Compliance & Audit Readiness: Support internal and external audits by producing evidence, validating control execution, and coordinating stakeholder responses. Maintain audit-ready documentation and supporting artifacts. Assist with regulatory compliance activities aligned to applicable frameworks and standards. Review controls for ongoing compliance and identify opportunities for process improvement and automation.

Participate in audit remediation activities and corrective action tracking. Monitoring, Metrics & Reporting: Develop and maintain security control metrics, dashboards, and reporting capabilities. Analyze trends and control performance data to identify areas requiring management attention. Partner with data and reporting teams to automate evidence collection and control monitoring activities.

Produce reports that communicate risk exposure, compliance status, remediation progress, and overall security posture. Support the development of meaningful and repeatable performance indicators for security controls and compliance programs. Stakeholder Engagement: Serve as a liaison between cybersecurity, operational technology, technology support teams, and business stakeholders. Provide consultative guidance on security requirements, control implementation, and risk mitigation strategies.

Educate stakeholders on security processes, controls, risk management principles, and compliance obligations. Support projects and initiatives by integrating security requirements throughout the project lifecycle. Build strong partnerships that promote a risk-aware and security-focused culture. Required Qualifications and Skills: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field.

Associates degree with 2 years relevant experience in security (cyber or physical) Equivalent combination of education and relevant experience may be considered. Experience in cybersecurity, risk management, compliance, audit, or security controls management. Experience performing security assessments, risk analysis, or cont