Our client is seeking a highly experienced NIST implementor to lead and execute cybersecurity frameworks and compliance programs based on NIST CSF 1.1, NIST CSF 2.0, NIST 800-53, NIST 800-30, NIST 800-37, and NIST Risk Management Framework (RMF).
We are looking for immediate joiners who can bring practical experience in implementing and managing NIST-based security programs for enterprise clients.
Requirements
Key Responsibilities:
NIST Framework Implementation and Cybersecurity Compliance & Governance
- Implement NIST Cybersecurity Framework (CSF 1.1 & CSF 2.0), NIST 800-53, and NIST RMF across enterprise environments.
- Conduct NIST gap assessments, risk assessments, and maturity modelling to evaluate an organization’s security posture.
- Align NIST 800-53 controls with business processes and regulatory requirements.
- Perform bidirectional mappings between C2M2 and NIST CSF to evaluate control alignment.
- Ensure security controls align with ISO 27001, CIS Controls, ITGC, ITAC.
- Develop and implement security policies, procedures, and guidelines based on NIST standards.
- Develop maturity models based on NIST CSF and C2M2 frameworks.
- Establish C2M2-to-CSF and CSF-to-C2M2 mappings to assess cybersecurity maturity.
- Apply NIST OLIR (Online Informative References) guidelines for framework integration.
Stakeholder Engagement & Security Advisory
- Work closely with C-level executives, security teams, auditors, and regulators to ensure compliance.
- Prepare risk reports, dashboards, and technical assessments for stakeholders.
- Provide security training and awareness to teams on NIST implementation.
Requirements:
Education & Expertise:
- Bachelor’s or master’s degree in computer science, Cybersecurity, Information Technology, or related fields.
- Deep knowledge of NIST frameworks:
- NIST CSF 1.1 & 2.0, NIST 800-53, NIST 800-30, NIST 800-37, NIST RMF.
- NIST gap assessments, security control implementation, and maturity modelling.
- C2M2-to-CSF and CSF-to-C2M2 bidirectional mappings.
- Experience in controls testing, security control validation, and effectiveness assessment.
- Strong understanding of regulatory frameworks (ISO 27001, SOC 2, PCI DSS, RBI, SEBI, GDPR).
- Expertise in cyber risk assessment methodologies, cloud security (AWS, Azure, GCP), and IT governance.
- Technical Control- ToD ( Test of Design) , ToE (Test of Effectiveness).
Certifications (Preferred):
CISSP, CISM, CISA, CRISC, CCSP, CGEIT, ISO 27001 LI/LA, AWS Security Specialty, Azure Security Engineer.
Benefits
Work with one of the Big 4's in India
Healthy work Environment
Work Life Balance
