Cybersecurity Risk & Compliance Consultant (NIST CSF)

OPTIVEUM sp. z o.o. • Capon Bridge, WV

3d • PLN 140 • Remote

About The Position

Optiveum is recruiting and contracting a Cybersecurity Risk & Compliance Consultant to join a global client in the banking industry. The consultant will conduct a NIST CSF maturity assessment with client representatives, reassessing ratings from a previous assessment and keeping the approach current, comparable, and future-proof. The role is based remotely in Poland and is full-time at 40 hours per week. The engagement is on a B2B basis, with a rate of up to 140 PLN per hour.

The consultant will update the existing NIST assessment workbook while maintaining backwards compatibility, plan and run stakeholder workshops and meetings, collect and analyse input, calibrate and justify updated ratings, and deliver technical and executive reports. Approximately 70 stakeholders will participate in workshops and meetings conducted via Microsoft Teams.

Requirements

• Hands-on experience conducting NIST CSF maturity assessments.
• Experience with similar maturity assessments in the financial services sector.
• Solid understanding of Information Security and Risk Management processes and industry practices.
• Preferably 5+ years of experience in the Information Security domain.
• Fluent spoken and written English.
• Structured and analytical approach, with the ability to deliver timely and accurate Information Security reporting.
• Ability to make complex data understandable for a non-technical audience.
• Constructive communication with all levels of the organisation.
• Proactive, flexible, independent, and pragmatic team player with a solution-oriented mindset.

Nice To Haves

• Information Security, Risk, or Business Continuity certifications such as CISM, ISO 27001, or ISO 22301.

Responsibilities

• Review and update the existing NIST assessment workbook used for data collection, maintaining backwards compatibility for comparisons and preparing it for subsequent assessments.
• Take part in planning workshops.
• Run kick-off meetings with relevant stakeholders.
• Conduct workshops and meetings with approximately 70 stakeholders via Microsoft Teams and document the input gathered.
• Analyse and process workshop data, and justify updated ratings, including reviews and calibrations.
• Produce and present a technical results report and an executive report.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed