NIST Assessment Consultant Position

emagine Group; Województwo pomorskie; Hybrid; PLN 176,000 - 251,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

emagine Group in Poland is seeking a qualified information security consultant to lead NIST CSF maturity assessments, update prior work, and ensure valid comparisons through collaborative workshops with stakeholders.

You will plan and run workshops with around 70 participants via Teams, document findings, and produce both technical and executive reports. Travel to offices across Poland, with a preference for the Tricity area, is expected, working in-office three days per week.

Qualifications

• Proficient in English (spoken and written).
• Strong understanding of information security and risk management processes.
• Experience conducting NIST CSF maturity assessments.
• Familiarity with maturity assessments in financial services.

Responsibilities

• Review and update the NIST Assessment workbook for data collection that is comparable and future-proof.
• Plan and participate in workshops.
• Lead kick-off meetings with stakeholders.
• Facilitate workshops with ~70 stakeholders via Teams and document inputs.
• Analyze workshop data and justify new ratings with reviews/calibrations.
• Produce and present technical and executive reports.

Skills

NIST CSF maturity assessments

Stakeholder workshops

Data analysis and reporting

Information Security

English proficiency

Education

CISM certification

ISO27001 (ISO27x)

ISO22301 certification

Tools

Teams

Job description

Rate: max 155 pln/h net + VAT, B2B

Location: 3 days a week in office (Gdańsk / Gdynia / Łódź / Warsaw)

Industry: banking

Summary: The consultants are responsible for conducting a NIST CSF Maturity assessment, focusing on updating prior assessments and ensuring valid comparisons through collaboration and workshops with various stakeholders.

Main Responsibilities:

• Review and update the existing NIST Assessment "workbook" for data collection that is comparative and future-proof.
• Participate in the planning of workshops.
• Conduct kick-off meetings with relevant stakeholders.
• Facilitate workshops/meetings with approximately 70 stakeholders via Teams and document the gathered input/data.
• Analyze/process workshop data and justify the new ratings, including reviews and potential calibrations.
• Produce and present both a technical results report and an executive report.
• Work from various locations in Poland, with preference for the Tricity area, and be present in the office three days a week.

Key Requirements:

• Proficiency in spoken and written English.
• Strong understanding of Information Security and Risk Management processes, including industry practices.
• Experience conducting NIST CSF maturity assessments.
• Familiarity with similar maturity assessments within the Financial Services Industry (FSI).
• Relevant certifications (e.g., CISM, ISO27x, ISO22301).
• A minimum of 5 years of experience in the Information Security domain.
• Proactive, flexible, independent, and pragmatic team player.
• Ability to communicate effectively with all organizational levels.
• Structured and analytical with high proficiency in accurate reporting.
• Ability to distill complex data into understandable insights for non-technical audiences.

Nice to Have:

• Able to work from the office three days per week.

Other Details:

• Location: Various in Poland, preference for the Tricity area.
• Work Format: In-office three days/week.