Cybersecurity Risk & Compliance Consultant (NIST CSF)

ITConnect; Polska; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Office-based 3 days/week

Job summary

ITConnect Sp. z o.o. in Poland seeks a Cybersecurity Risk & Compliance Consultant (NIST CSF) to lead a maturity assessment with client representatives, using workshops to reassess ratings and ensure future-proofing.

The role requires 5+ years in Information Security and strong English communication. You will update the assessment workbook, plan and run workshops (approx. 70 stakeholders via Teams), analyze data, justify ratings, and deliver technical and executive reports.

Qualifications

• Minimum 5 years in Information Security domain.
• Experience with NIST CSF maturity assessments.
• Ability to plan, run workshops and present findings.
• Professional English speaking and writing skills.
• Knowledge of risk management and business continuity concepts.

Responsibilities

• Conduct NIST CSF maturity assessment with ~70 stakeholders via Teams.
• Review and update NIST Assessment workbook for comparability and future-proofing.
• Plan and conduct workshops and kick-off meetings.
• Analyze workshop data and justify updated ratings.
• Produce technical and executive reports.

Skills

NIST CSF

Information Security

Risk Management

Workshop facilitation

Stakeholder communication

Analytical thinking

Education

CISM

ISO27001

ISO22301

Tools

Microsoft Teams

MS Excel

Job description

• Cybersecurity Risk & Compliance Consultant (NIST CSF)

The assignment involves conducting a NIST CSF Maturity Assessment in collaboration with the client’s representatives. The assessment was last conducted in 2026 using the NIST Framework and will focus on reassessing previous ratings through workshops with relevant stakeholders, ensuring valid comparisons and a future-proof, up-to-date assessment approach.

• Review and update the existing NIST Assessment „workbook” for data collection, ensuring it is both comparative/backwards compatible and future-proof for subsequent assessments.
• Take part in planning workshops.
• Conduct kick-off meetings with relevant stakeholders.
• Conduct workshops/meetings with relevant stakeholders (approximately 70 stakeholders) via Microsoft Teams and document the input/data gathered.
• Analyse and process workshop data and justify the updated ratings (including reviews and potential calibrations).
• Produce and present a technical results report and an executive report.
• Have professional English spoken & written skills.
• Have a solid understanding of Information Security and Risk Management processes including industry practices within Information Security.
• Have experience with conducting NIST CSF maturity assessments.
• Have experience working with similar maturity assessments within FSI.
• Preferably hold relevant Information Security, Risk and Business Continuity Management certifications such as CISM, ISO27x, ISO22301 etc.
• Preferably have minimum 5 years of experience in Information Security domain.
• Be proactive, flexible, independent and pragmatic team-players with a solution-oriented mindset.
• Be able to communicate in a constructive manner with all levels of the organisation.
• Be structured, analytical and have a high ability to provide timely and accurate Information Security reporting.
• Be able to focus on information value and making complex data understandable for a non-technical audience.

To oferujemy:

• working from the office three days per week