Cybersecurity Controls Assessor
Rolls-Royce · Indianapolis, IN
$114,400–$185,900from the description
Jun 28, 2026
Indianapolis, IN
Jul 20, 2026
What this job asks for AI summary
Senior level · 5+ years · Indianapolis-Carmel-Anderson, IN · Full-time
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 5 people in the Indianapolis-Carmel-Anderson, IN area plausibly meet what this posting asks for (information security analysts). range 3–8
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
What the occupation pays Median $98,060 (middle half $72,800–$128,850). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The degree requirement is flexible: the JD accepts an Associate's + 7 years, Bachelor's + 5 years, Master's + 3 years, PhD + 0 years, or 9+ years of experience in lieu of any degree — so no minimum degree is hard-gated. overall years minimum is set to 5 (the lowest experience gate paired with a degree, and the most common path).
CMMC and NIST SP 800-53 are the core assessment frameworks named in the role's primary purpose statement and 'What You Will Be Doing' section, treating them as hard requirements for this role.
All skills under 'Preferred Requirements' (NIST RMF, SOC analyst experience, SIEM, vulnerability scanning, packet capture, network anomaly detection, threat actor TTPs) are listed in an explicitly secondary section and are not hard gates.
No security clearance is currently required, though the role supports DoD/federal environments; clearance is not stated as a gate.
Aerospace or DoD/federal government experience is called 'a strong plus' — preferred, not required.
The role is hybrid (Indianapolis, IN) with an average of three days per week on-site; it is not fully remote.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): NIST SP 800-53.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.