Information Security Consultant (NIST CSF Assessment)

About the role

Why choose this offer?

Project

You will be involved in a financial project focused on conducting a NIST Cybersecurity Framework (NIST CSF) maturity assessment within a large-scale banking environment. The project involves reassessing previously established cybersecurity maturity ratings through stakeholder workshops, validating and calibrating results, and enhancing the existing assessment methodology to ensure both historical comparability and future usability. You will collaborate with security, risk, and business stakeholders to evaluate current cybersecurity capabilities and deliver executive-level insights and recommendations.

Requirements

• Minimum 5 years of experience in the Information Security domain; relevant certifications in Information Security, Risk Management, or Business Continuity Management (e.g., CISM, ISO 27001, ISO 22301) would be considered an advantage.

• Hands-on experience conducting NIST CSF maturity assessments within the financial services sector.

• Strong understanding of Information Security, Cybersecurity Governance, Risk Management, and related industry best practices.

• Ability to independently facilitate workshops, engage stakeholders across all organizational levels, and communicate effectively with both technical and non-technical audiences.

• Strong analytical, problem-solving, and reporting skills, with the ability to process complex information, justify maturity ratings, and deliver clear executive-level recommendations.

• Structured, proactive, and solution-oriented approach, with the ability to work independently as well as collaboratively within cross-functional teams.

• Professional English communication skills, both spoken and written.

• NIST CSF

• Information Security Frameworks

• Cyber Risk Management

• Information Security Maturity Assessments

Responsibilities

1. 1

   Review and update the existing NIST CSF assessment workbook and data collection methodology to ensure compatibility with previous assessments while supporting future evaluation cycles.

2. 2

   Participate in the planning and coordination of assessment workshops.

3. 3

   Conduct kick-off meetings with key stakeholders across the organization.

4. 4

   Facilitate workshops and meetings with approximately 70 stakeholders to gather assessment data and evidence.

5. 5

   Document, consolidate, and validate information collected during workshops.

6. 6

   Analyze assessment results and justify maturity ratings based on gathered evidence.

7. 7

   Support calibration and review activities to ensure consistency and accuracy of assessment outcomes.

8. 8

   Prepare comprehensive technical assessment reports.

9. 9

   Develop executive-level reports and presentations tailored for senior management.

10. 10

    Communicate findings, risks, and recommendations to both technical and non-technical audiences.

11. 11

    Collaborate with Information Security and Risk Management stakeholders throughout the assessment lifecycle.