Description

You will lead the implementation of NIST CSF 2.0 across enterprise systems and manage security risk documentation.

This role is on-site.

Responsibilities

• Assess security controls and document implementation status, risks, and gaps.
• Develop and maintain core security documentation, including SSP, BIA, Contingency Plans, and Change Management Plans.
• Create and manage Plans of Action and Milestones (POA&M) for tracking remediation efforts.
• Collaborate with IT and security stakeholders to ensure proper control implementation and monitoring.
• Provide SME expertise in risk assessment, technical security controls, SIEM, and XDR solutions.

Required Skills

• 10+ years of experience in information security, including lead-level responsibilities.
• Bachelor's degree in Information Technology, Cybersecurity, or related field.
• Strong hands-on experience in risk management, security assessments, and incident response.
• In-depth knowledge of NIST Cybersecurity Framework (CSF) and/or NIST Risk Management Framework (RMF).
• Solid understanding of enterprise IT infrastructure and security operations.
• Proficiency in producing high-quality security documentation.

Preferred Skills

• Industry certifications such as CISSP, CISM, or CISA.
• Experience supporting government or public-sector environments.

Key Skills

Education

Bachelor's degree