NIST CSF Maturity Assessment Consultant

Quick Facts

• Rate: max 155 PLN/h net + VAT (B2B)
• Location: 3 days a week in office (Gdańsk / Gdynia / Łódź / Warsaw)
• Industry: banking

Description

Consultants conduct a NIST CSF maturity assessment, updating prior assessments and ensuring valid comparisons through collaboration and workshops with various stakeholders.

Responsibilities include reviewing the data-collection workbook, facilitating workshops, analyzing collected inputs to justify ratings, and producing both technical and executive reports.

Responsibilities

• Review and update the existing NIST Assessment workbook for comparative and future-proof data collection
• Participate in planning workshops
• Conduct kick-off meetings with relevant stakeholders
• Facilitate workshops/meetings with approximately 70 stakeholders via Teams and document gathered input/data
• Analyze/process workshop data, justify new ratings, and review/calibrate as needed
• Produce and present both a technical results report and an executive report
• Work across locations in Poland (preference for the Tricity area) with presence in the office three days per week

Requirements

• Proficiency in spoken and written English
• Strong understanding of Information Security and Risk Management processes, including industry practices
• Experience conducting NIST CSF maturity assessments
• Familiarity with similar maturity assessments within the Financial Services Industry (FSI)
• Relevant certifications (e.g., CISM, ISO27x, ISO22301)
• Minimum 5 years of experience in the Information Security domain
• Proactive, flexible, independent, and pragmatic team player
• Ability to communicate effectively with all organizational levels
• Structured and analytical with high proficiency in accurate reporting
• Ability to distill complex data into understandable insights for non-technical audiences

Nice to Have

• Able to work from the office three days per week

Other details: Location varies in Poland; work format is in-office three days per week.