Skip to content

GRC

Cybersecurity Risk & Compliance Consultant (NIST CSF)

Optiveum logoOptiveumRemote in PolandPosted 1w ago
Apply on Optiveum (shows the role here)Optiveum as an employer: salaries and roles

The full posting

About the Offer

We are currently looking for a Cybersecurity Risk & Compliance Consultant (NIST CSF) to join the team of our global client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

You will carry out a NIST CSF maturity assessment together with the client's representatives. The previous assessment was performed using the NIST Framework, so the work focuses on reassessing earlier ratings through stakeholder workshops, ensuring valid comparisons and keeping the assessment approach up to date and future-proof.

Key Details

  • Rate: up to 140 PLN/h (B2B)
  • Work Model: 100% remote, full-time (40h/week)
  • Location: Poland (remote)

Responsibilities

  • Review and update the existing NIST assessment workbook used for data collection, keeping it backwards compatible for comparisons and future-proof for subsequent assessments
  • Take part in planning workshops
  • Run kick-off meetings with relevant stakeholders
  • Conduct workshops and meetings with approximately 70 stakeholders via Microsoft Teams and document the input gathered
  • Analyse and process workshop data and justify updated ratings, including reviews and calibrations
  • Produce and present a technical results report and an executive report

Requirements

  • Hands-on experience conducting NIST CSF maturity assessments
  • Experience with similar maturity assessments in the financial services sector
  • Solid understanding of Information Security and Risk Management processes and industry practices
  • Preferably 5+ years of experience in the Information Security domain
  • Fluent spoken and written English
  • Structured and analytical, able to deliver timely and accurate Information Security reporting
  • Ability to make complex data understandable for a non-technical audience
  • Constructive communication with all levels of the organisation
  • Proactive, flexible, independent and pragmatic team player with a solution-oriented mindset

Nice to have

  • Information Security, Risk or Business Continuity certifications such as CISM, ISO 27001 or ISO 22301

Where you can be based

This position is 100% remote and open to applicants based in Poland.

Text as Optiveum published it; last compared with the original on 13 Nov 2026.

Apply on Optiveum (shows the role here)

The employer: Optiveum

Optiveum places IT specialists with corporate clients, mostly banks, and its board carries seven security contracts across Polish cities.

Pay and benefits: B2B contractor agreements signed directly with Optiveum for full-time client assignments.

Full postings from Optiveum All Optiveum openings on the board Optiveum employer profile

Other security roles worth a look

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Optiveum posts a security role

We read Optiveum's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.