Senior Security Analyst

Title : Senior Security Analyst

Location : Hybrid in Los Angeles, CA (1 day a week onsite, rest is remote)

Duration : 6-12 mo but room for extension

g that's on that job description like all the NIST things are on the resume

Certification : Looks like any type of cyber security certification but we have to include a copy with the resume.

What we need for submittal : We have to send the resume, any copy of Cybersecurity certifications and 3 references (name, title, company, phone, email, dates they worked together and size of project / project scope)(if you look right below here it tells you what they need for references :

Information Required for Submission

Complete Resume

Copy of Cybersecurity Certifications

Provide a minimum of three (3) references of current and / or past project experiences of the proposed resource as listed in the statement of work (both public sector and commercial references are acceptable). The reference information must include the following information : NEED FOR REFERENCES : NAME, TITLE, COMPANY, PHONE, EMAIL, PROJECT SIZE, PROJECT SCOPE FROM THE PROJECT, DATES THAT THEY WORKED WITH THAT REFERENCE) SEE HERE :

1) Project Size

2) Project Scope, including specific services provided

3) Period of Performance

4) Contact information, including name of the organization, contact person, phone number, and email

MINIMUM QUALIFICATIONS :

Proposers shall meet each of the minimum qualification requirements at the time of proposal submittal :

• Five years of experience performing assessments, alignments, and policy development with the NIST Cybersecurity Framework (CSF) across all departments, systems, and third-party interfaces.
• Five years of experience with conducting state assessment, target profile development, Gap analysis and Implementation roadmap with control mappings to various processes. Demonstrated expertise with Framework integration with Enterprise Risk Management (ERM), Identity and Access Management (IAM) and Cloud security controls. Ensure interoperability with compliance (HIPAA, COPPA, FERPA, CIIPA, GDPR, etc.)
• Experience in establishing the Metrics and Continuous Monitoring providing dashboard for dashboards for executive visibility (CISO, CIO, board), planning regular maturity assessment and establishing metrics for each CSF function and subcategory.

REQUIRED QUALIFICATIONS

SCOPE OF SERVICES

Policy Development

NIST Alignment

NIST Assessment

Maturity Assessment against NIST CSF 2.0

o Executive summary

o Maturity scorecard

o Identified gaps and risks

o Remediation recommendations and risk prioritization