QA Specialist - Cybersecurity

Job summary

Review and quality-assure approximately 175 cybersecurity controls aligned with NIST, validating objectives, descriptions, evidence requirements, testing criteria, and control effectiveness. Develop or review repeatable testing procedures, identify gaps and improvement opportunities, assess AI-related control impacts, and work with control owners and subject matter experts to resolve findings.

Job details

QA Specialist - Cybersecurity contract Oct 8, 2026 - Oct 31, 2026 Remote Description We are looking for an experienced Cybersecurity Controls Assurance / QA Specialist to support the review and QA of approximately 175 cybersecurity controls. Key Responsibilities Review and QA cybersecurity controls aligned to NIST domains/frameworks Validate control objectives, descriptions, evidence requirements, and testing criteria Assess control design and operating effectiveness Develop/review clear, repeatable control testing procedures Identify control gaps, inconsistencies, and improvement opportunities Assess AI/Generative AI impacts and related control/testing requirements Work with control owners and SMEs to resolve findings What We’re Looking For: Strong background in Cybersecurity Assurance, IT Risk, IT Audit, GRC, or Controls Testing Hands-on experience reviewing and testing cybersecurity controls Strong knowledge of NIST Understanding of IAM, data protection, vulnerability management, logging/monitoring, incident management, change management, and third-party risk Exposure to AI/GenAI risk or AI governance is highly desirable CISA, CRISC, CISSP, CISM, or CIA is an asset

What you’ll do

Review and quality-assure approximately 175 cybersecurity controls aligned with NIST, validating objectives, descriptions, evidence requirements, testing criteria, and control effectiveness. Develop or review repeatable testing procedures, identify gaps and improvement opportunities, assess AI-related control impacts, and work with control owners and subject matter experts to resolve findings.

Requirements

Candidates should have a strong background in cybersecurity assurance, IT risk, IT audit, GRC, or controls testing, with hands-on experience reviewing and testing cybersecurity controls and strong knowledge of NIST. Familiarity with IAM, data protection, vulnerability management, logging and monitoring, incident and change management, and third-party risk is expected; AI/GenAI risk exposure is highly desirable, and CISA, CRISC, CISSP, CISM, or CIA is an asset.

Listed skills

• Change Management · Preferred
• Incident Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity Assurance
• Cybersecurity Controls Testing
• NIST
• Control Design Assessment
• Operating Effectiveness Testing
• Control Testing Procedures
• IT Risk
• IT Audit
• GRC
• Identity and Access Management
• Data Protection
• Vulnerability Management
• Logging and Monitoring
• Incident Management
• Change Management
• Third-Party Risk

Job areas

• Security & Safety
• Technology
• Consulting

More jobs from Quality IT Resourcing