Cybersecurity Risk & Compliance Consultant (NIST CSF)
About this role
Cybersecurity Risk & Compliance Consultant (NIST CSF)
About the Offer
We are currently looking for a Cybersecurity Risk & Compliance Consultant (NIST CSF) to join the team of our global client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.
You will carry out a NIST CSF maturity assessment together with the client's representatives. The previous assessment was performed using the NIST Framework, so the work focuses on reassessing earlier ratings through stakeholder workshops, ensuring valid comparisons and keeping the assessment approach up to date and future-proof.
Key Details:
Rate: up to 140 PLN/h (B2B)
Work Model: 100% remote, full-time (40h/week)
Location: Poland (remote)
Responsibilities:
Review and update the existing NIST assessment workbook used for data collection, keeping it backwards compatible for comparisons and future-proof for subsequent assessments
Take part in planning workshops
Run kick-off meetings with relevant stakeholders
Conduct workshops and meetings with approximately 70 stakeholders via Microsoft Teams and document the input gathered
Analyse and process workshop data and justify updated ratings, including reviews and calibrations
Produce and present a technical results report and an executive report
Requirements:
Hands-on experience conducting NIST CSF maturity assessments
Experience with similar maturity assessments in the financial services sector
Solid understanding of Information Security and Risk Management processes and industry practices
Preferably 5+ years of experience in the Information Security domain
Fluent spoken and written English
Structured and analytical, able to deliver timely and accurate Information Security reporting
Ability to make complex data understandable for a non-technical audience
Constructive communication with all levels of the organisation
Proactive, flexible, independent and pragmatic team player with a solution-oriented mindset
Nice to have:
Information Security, Risk or Business Continuity certifications such as CISM, ISO 27001 or ISO 22301
Originally posted on Himalayas