Consultant for NIST CSF Maturity Assessment

emagine is looking for a consultant, who has experience with NIST CSF Maturity Assessment

The client need a consultant to perform the NIST CSF self assessment of the 5 NIST functions of the cyber maturity capabilities.

The assessment was last conducted in 2022 and the ratings have to be reassessed. The assessment shall be conducted by interviewing stakeholders and SME and driving a rating agreeable with them vs the last noted rating whilst reviewing the maturity journey following the last assessment. The assessment will not be conducted evidence based.

To achieve the objectives the consultant will be required to:
1. Conduct the initial review of ratings with stakeholder by hosting an initial kick off session and circulating information request forms
2. Conduct and document follow up stakeholder interview workshops (approximately 50 stakeholders)
3. Analyze the data provided to justify the new NIST ratings
4. Benchmark the client against its peers using ISF data
5. Support in executive report creation and presentation
6. Draft a standard operating procedure for future use annually.

The assessment was previously conducted using NIST CSF1.1 and therefore the new 2024 assessment needs to have direct linkage to these numbers and a soft linkage to the new NIST CSF 2.0.

The assessment has a timeline from kick or to completion of the 1st April 2024 and the final (latest) day for completion would be 28 June 2024.

Must-have competences:

Working knowledge of the NIST CSF framework and well as ISO 27000K

Previous experience running a capability maturity assessment in a large financial institution

Strong technical background

Experience conducting workshops, attention to detail as well as strong stakeholder management.

Either certified in CISM, CRISC or CISSP.

Start date: 1st of April 2024

Duration: 3 months

Allocation: Fulltime, time & material

Location: Taastrup, hybrid (3 days onsite & 2 days remote)