Cybersecurity Risk & Compliance Consultant (NIST CSF)

OPTIVEUM

2d • Remote

About The Position

Optiveum is the recruitment and contracting party for this role with a global client in the banking industry. The consultant will conduct a NIST Cybersecurity Framework (NIST CSF) maturity assessment with the client’s representatives. Since the previous assessment used the NIST Framework, the work will reassess earlier ratings through stakeholder workshops, support valid comparisons, and keep the assessment approach up to date and future-proof.

The role is based in Poland and is 100% remote, full-time at 40 hours per week. The stated rate is up to 140 PLN per hour on a B2B basis. The consultant will work with approximately 70 stakeholders using Microsoft Teams, analyse and calibrate the collected information, and produce technical and executive reports.

Requirements

• Hands-on experience conducting NIST CSF maturity assessments.
• Experience with similar maturity assessments in the financial services sector.
• Solid understanding of Information Security and Risk Management processes and industry practices.
• Fluent spoken and written English.
• Structured and analytical approach, with the ability to deliver timely and accurate Information Security reporting.
• Ability to make complex data understandable to a non-technical audience.
• Constructive communication with all levels of the organisation.
• Proactive, flexible, independent, and pragmatic team player with a solution-oriented mindset.

Nice To Haves

• Preferably 5+ years of experience in the Information Security domain.
• Information Security, Risk, or Business Continuity certifications such as CISM, ISO 27001, or ISO 22301.

Responsibilities

• Review and update the existing NIST assessment workbook used for data collection, maintaining backward compatibility for comparisons and preparing it for subsequent assessments.
• Participate in planning workshops.
• Conduct kick-off meetings with relevant stakeholders.
• Conduct workshops and meetings with approximately 70 stakeholders via Microsoft Teams and document the input gathered.
• Analyse and process workshop data, justify updated ratings, and perform reviews and calibrations.
• Produce and present a technical results report and an executive report.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed