NIST Implementor

Our client is seeking a highly experienced NIST implementor to lead and execute cybersecurity frameworks and compliance programs based on NIST CSF 1.1, NIST CSF 2.0, NIST 800-53, NIST 800-30, NIST 800-37, and NIST Risk Management Framework (RMF).

We are looking for immediate joiners who can bring practical experience in implementing and managing NIST-based security programs for enterprise clients.

Requirements

Key Responsibilities:

NIST Framework Implementation and Cybersecurity Compliance & Governance

• Implement NIST Cybersecurity Framework (CSF 1.1 & CSF 2.0), NIST 800-53, and NIST RMF across enterprise environments.
• Conduct NIST gap assessments, risk assessments, and maturity modelling to evaluate an organization’s security posture.
• Align NIST 800-53 controls with business processes and regulatory requirements.
• Perform bidirectional mappings between C2M2 and NIST CSF to evaluate control alignment.
• Ensure security controls align with ISO 27001, CIS Controls, ITGC, ITAC.
• Develop and implement security policies, procedures, and guidelines based on NIST standards.
• Develop maturity models based on NIST CSF and C2M2 frameworks.
• Establish C2M2-to-CSF and CSF-to-C2M2 mappings to assess cybersecurity maturity.
• Apply NIST OLIR (Online Informative References) guidelines for framework integration. 

Stakeholder Engagement & Security Advisory

• Work closely with C-level executives, security teams, auditors, and regulators to ensure compliance.
• Prepare risk reports, dashboards, and technical assessments for stakeholders.
• Provide security training and awareness to teams on NIST implementation.

Requirements:

Education & Expertise:

• Bachelor’s or master’s degree in computer science, Cybersecurity, Information Technology, or related fields.

• Deep knowledge of NIST frameworks:
• NIST CSF 1.1 & 2.0, NIST 800-53, NIST 800-30, NIST 800-37, NIST RMF.
• NIST gap assessments, security control implementation, and maturity modelling.
• C2M2-to-CSF and CSF-to-C2M2 bidirectional mappings.
• Experience in controls testing, security control validation, and effectiveness assessment.
• Strong understanding of regulatory frameworks (ISO 27001, SOC 2, PCI DSS, RBI, SEBI, GDPR).
• Expertise in cyber risk assessment methodologies, cloud security (AWS, Azure, GCP), and IT governance.
• Technical Control- ToD ( Test of Design) , ToE (Test of Effectiveness). 

Certifications (Preferred):

CISSP, CISM, CISA, CRISC, CCSP, CGEIT, ISO 27001 LI/LA, AWS Security Specialty, Azure Security Engineer.

Benefits

Work with one of the Big 4's in India

Healthy work Environment

Work Life Balance