Cybersecurity Risk management Consultant

Specific responsibilities include:

1. Senior individual contributor for information security risk management projects. Sample projects/programs could include but are not limited to:
2. Control design and assessment for high-demand technical areas such as ERP, IT Service Management, Identity and Access Management, IT Resiliency, Cloud, etc.
3. Compliance framework mapping and implementation,
4. Risk remediation management,
5. Information Security risk reporting and monitoring
6. Creation of roadmaps to mature or advance Information Security Strategies/Programs/Controls
7. Design and enablement of cyber controls functions and processes
8. Direct experience as a power user of Cybersecurity GRC/ solutions, tools, and technologies, specifically ServiceNow and Archer
9. Projects or roles requiring coordination across lines of defense working with technical, business, compliance, risk, and audit teams to deliver solutions.
10. Delivery of information security risk assessments for large-scale IT implementation projects including consulting with security architecture function for threat modeling, appropriate tiering of N tier products/platforms, design of infrastructure security controls to protect system components.

3. Practical use of risk management concepts and principles - including assessment, prioritization, delivery of treatment plans, tracking and reporting. Experience with NIST-SP800-30, ISO 27001/2, ISO 27005, COBIT