Cybersecurity Risk Assessment Consultant (NIST CSF / GRC)

Primary Skills (Mandatory)

Strong expertise in:

• NIST Cybersecurity Framework (CSF 2.0)
• NIST 800-53 & NIST 800-171 control mapping
• Cybersecurity risk assessment methodologies
• Security controls validation (evidence-based)
• Gap analysis & maturity assessment
• GRC frameworks and practices
• Risk identification, scoring, and prioritization
• Documentation review, interviews, and questionnaire-based assessments

Secondary Skills (Preferred)

• Public sector / judiciary / government IT environments
• SOC 2, ISO 27001, or similar frameworks
• Security policy and compliance programs
• Strong stakeholder communication (technical + executive level)
• Report writing:
  • Executive summaries
  • Technical assessment reports
• Project management exposure (Agile / Waterfall)
• Tools:
  • GRC tools (Archer, ServiceNow GRC, etc.)
  • Excel-based assessment workbooks