NIST CSF Risk & Compliance Consultant — Remote

Optiveum; Gdańsk; Remote; PLN 159,000 - 227,000; Full time

Job summary

Optiveum is recruiting a Cybersecurity Risk & Compliance Consultant (NIST CSF) to support a global banking client. You will re-assess the NIST CSF maturity ratings through stakeholder workshops, ensuring valid comparisons and keeping the methodology up to date.

This 100% remote, full-time role (40h/week) is based in Poland. You will run workshops with about 70 stakeholders via Microsoft Teams and deliver both technical and executive reports.

Qualifications

• Hands-on experience conducting NIST CSF maturity assessments.
• Experience with similar maturity assessments in financial services.
• Solid understanding of Information Security and Risk Management processes.
• 5+ years in Information Security domain.
• Fluent spoken and written English.
• Ability to present complex data to non-technical audiences.
• Proactive, flexible, independent team player with a solution-oriented mindset.

Responsibilities

• Review and update the NIST CSF assessment workbook for data collection.
• Take part in planning workshops.
• Run kick-off meetings with relevant stakeholders.
• Facilitate workshops with ~70 stakeholders via Teams and document input.
• Analyze workshop data and justify updated ratings with reviews/calibrations.
• Produce and present technical and executive reports.

Skills

NIST CSF maturity assessments

Financial services domain experience

Information Security basics

English fluency

Analytical thinking

Communication skills

Stakeholder facilitation

Tools

Microsoft Teams

Job description

Optiveum is recruiting a Cybersecurity Risk & Compliance Consultant (NIST CSF) to support a global banking client. You will re-assess the NIST CSF maturity ratings through stakeholder workshops, ensuring valid comparisons and keeping the methodology up to date.

This 100% remote, full-time role (40h/week) is based in Poland. You will run workshops with about 70 stakeholders via Microsoft Teams and deliver both technical and executive reports.