Description

Lead the assessment, development, and implementation of organizational cybersecurity policies aligned with the NIST CSF framework.

Responsibilities

• Assess current cybersecurity policies and procedures against the NIST CSF framework to identify gaps.
• Draft clear policies and standards addressing governance, risk management, asset management, access control, and incident response.
• Develop detailed procedures that operationalize NIST CSF core functions, categories, and subcategories.
• Collaborate with IT, security, legal, and department heads to ensure policies are practical and aligned with organizational goals.
• Prepare reports and presentations for management regarding compliance status and policy effectiveness.

Required Skills

• 6+ years of experience in IT security-related responsibilities.
• 2+ years of experience producing information security documentation, including procedures, standards, and guidelines.
• Comprehensive understanding of the NIST Cybersecurity Framework (CSF) core functions and categories.
• Deep knowledge of security principles including CIA triad, risk assessments, administrative controls, technical controls, and disaster recovery.
• Proficiency in formulating policies aligned with NIST CSF or analogous frameworks.
• Strong experience in managing document versioning and track changes using version control systems.
• Ability to translate complex technical concepts into implementable policies for diverse stakeholders.

Preferred Skills

• Relevant certifications such as CISSP, CISM, CISA, GIAC, CCIE Security, or CompTIA.

Key Skills

Education

ANY GRADUATE