NIST CSF Maturity Assessment Consultant

Responsibilities:

• Review and update the existing NIST CSF Assessment workbook for data collection, ensuring backwards compatibility and future use
• Participate in planning assessment workshops
• Conduct kick-off meetings with relevant stakeholders
• Conduct workshops and meetings with approximately 70 stakeholders via Microsoft Teams
• Document and structure input and data gathered during stakeholder workshops
• Analyze and process workshop data to reassess previous NIST CSF maturity ratings
• Justify new maturity ratings and support reviews and potential calibration
• Produce and present a technical results report
• Produce and present an executive report

Requirements:

• Proven experience conducting NIST CSF maturity assessments
• Solid understanding of Information Security and Risk Management processes and industry practices
• Practical experience with similar maturity assessments within the Financial Services Industry (FSI)
• Ability to communicate constructively with stakeholders at all organizational levels
• Strong analytical and structured approach with the ability to provide timely and accurate Information Security reporting
• Ability to translate complex data into understandable information for non-technical audiences
• Professional spoken and written English
• Ability to work proactively, flexibly and independently as a pragmatic, solution-oriented team player
• Minimum 5 years of experience in the Information Security domain
• Relevant Information Security, Risk or Business Continuity Management certifications such as CISM, ISO 27x or ISO 22301

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant
• Employee referral program