TECHNICAL AND DOMAIN EXPERIENCE:

• Build cybersecurity process risk and control frameworks for clients that are rationalized against applicable laws and standards.
• Conduct risk assessment and cybersecurity maturity assessments for clients.
• Guide clients in establishing cybersecurity policies, standards, and procedures.
• Manage cybersecurity training & awareness services for clients from design to implementation.
• Advise clients on cybersecurity functions’ metrics and reporting for various levels of client audiences, including Audit Committees and Board of Directors.
• Provide governance services for clients to oversee their cybersecurity functions and practices, including governance over: policies and procedures, risk management, vulnerability management, incident management, etc.
• Build risk management practices for clients, including policies, procedures, Risk Register, etc.
• Previous experience as a systems administrator, systems engineer, or security analyst.
• Understanding of operating system hardening principles, network design principles, and systems security.
• Understanding of various cybersecurity domains (GRC, IAM, asset security, security architecture, network security, security operations).
• Understanding of security analysis, security events, and penetration testing.

PROCESS AND PROJECT MANAGEMENT EXPERIENCE:

• Ability to prioritize and multi-task, with flexibility and adaptability in work approach.
• Ability to manage project plans for client various data privacy engagements, including creating tasks, timelines, and budgets.
• Ability to report to leadership and clients on status updates periodically, including progress and challenges.

SOFT SKILLS:

• Strong interpersonal and communication skills; experience with cross-cultural communications.
• Calmness and clarity of thought under pressure and ability to maintain confidentiality.
• Train other staff and external clients, as necessary.
• Agile and flexible, capable of dealing with ambiguity, and confronting challenges and opportunities with speed, endurance, and decisiveness.
• Manage a team of consultants and managers on various projects.

TECHNICAL QUALIFICATIONS AND CERTIFICATIONS:

• Bachelor’s degree in business, computer science, information systems, engineering, or a related discipline.
• Strong knowledge in national and global industry practices and regulations in cybersecurity and data privacy, including NIST CSF, CIS, PCI DSS, HIPAA, ISO27001, CMMC, FedRAMP, SOX, GDPR, CCPA, etc.
• Industry certifications are preferred, but not required: CISSP, CISM, etc.

Please refer the Job description for details