Cybersecurity Risk & Compliance Consultant (NIST CSF)

Optiveum; United States; Remote; USD 41,000 - 58,000; Full time

Job summary

Optiveum приглашает консультанта по кибербезопасности для проведения оценки зрелости NIST CSF в банковской отрасли. Вы будете дистанционно сотрудничать с представителями клиентов, организовывать обсуждения и готовить технические и исполнительные отчеты.

Требуется практический опыт в NIST CSF, знание информационной безопасности и управления рисками, высокий уровень английского и сертификации типа CISM / ISO 27001 / ISO 22301, а также умение доступно объяснять данные не техническим аудиториям.

Qualifications

• Практический опыт проведения оценок NIST CSF зрелости в банковском секторе
• Опыт проведения подобных оценок в финансовых услугах
• Понимание информационной безопасности и процессов управления рисками
• Владение английским на профессиональном уровне

Responsibilities

• Провести обзор и обновление рабочей книги NIST оценки данных
• Участвовать в планировании рабочих встреч
• Проводить kick-off встречи с заинтересованными сторонами
• Проводить воркшопы и встречи с ~70 участниками через Teams и документировать input
• Анализировать и обосновывать обновленные рейтинги, включая калибровки
• Подготовка технического и исполнительного отчета по результатам

Skills

NIST CSF maturity assessments

Information Security

Risk Management

Stakeholder communication

English fluency

Education

CISM

ISO 27001

ISO 22301

Tools

NIST CSF Framework

Job description

Описание:

Cybersecurity Risk & Compliance Consultant (NIST CSF) We are currently looking for a Cybersecurity Risk & Compliance Consultant (NIST CSF) to join the team of our global client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us. You will carry out a NIST CSF maturity assessment together with the client's representatives. The previous assessment was performed using the NIST Framework, so the work focuses on reassessing earlier ratings through stakeholder workshops, ensuring valid comparisons and keeping the assessment approach up to date and future-proof.

Key Details:

• Rate: up to 140 PLN/h (B2B)
• Work Model: 100% remote, full-time (40h/week)
• Location: Poland (remote)

Задачи:

• Review and update the existing NIST assessment workbook used for data collection, keeping it backwards compatible for comparisons and future-proof for subsequent assessments
• Take part in planning workshops
• Run kick-off meetings with relevant stakeholders
• Conduct workshops and meetings with approximately 70 stakeholders via Microsoft Teams and document the input gathered
• Analyse and process workshop data and justify updated ratings, including reviews and calibrations
• Produce and present a technical results report and an executive report

Требования:

• Hands-on experience conducting NIST CSF maturity assessments
• Experience with similar maturity assessments in the financial services sector
• Solid understanding of Information Security and Risk Management processes and industry practices
• Preferably 5+ years of experience in the Information Security domain
• Fluent spoken and written English
• Structured and analytical, able to deliver timely and accurate Information Security reporting
• Ability to make complex data understandable for a non-technical audience
• Constructive communication with all levels of the organisation
• Proactive, flexible, independent and pragmatic team player with a solution-oriented mindset
• Information Security, Risk or Business Continuity certifications such as CISM, ISO 27001 or ISO 22301