Sign upLog in
See more jobs

Principal GRC, Cyber Security Data Architect

Black Rock Groups

  • NULL, CA
  • 3 days ago
    Want to know if you’re a fit?
    Upload your resume and let our AI show you.

    Skills

    • Agile Programming Methodologiesunmatched
    • Auditingunmatched
    • Business Analysisunmatched
    • CISA - Certified Information Systems Auditorunmatched
    • CISM - Certified Information Security Managerunmatched
    • CISSP - Certified Information Systems Security Professionalunmatched
    • Communication Skillsunmatched
    • Consultingunmatched
    • Customer Relationsunmatched
    • DataArchitect Data Modeling Toolunmatched
    • Establish Prioritiesunmatched
    • ISO (International Organization for Standardization)unmatched
    • Internet Securityunmatched
    • Leadershipunmatched
    • Microsoft Excelunmatched
    • Microsoft PowerPointunmatched
    • Microsoft SharePointunmatched
    • Microsoft Visiounmatched
    • PRINCE2unmatched
    • Performance Metricsunmatched
    • Power BIunmatched
    • Presentation/Verbal Skillsunmatched
    • Program Evaluationunmatched
    • Project Management Professional (PMP)unmatched
    • Project Planningunmatched
    • Reporting Dashboardsunmatched
    • Riskunmatched
    • Risk Analysisunmatched
    • Risk Managementunmatched
    • Security Architectureunmatched
    • Security Auditingunmatched
    • Security Consultingunmatched
    • ServiceNowunmatched
    • U.S. National Institute of Standards and Technology (NIST)unmatched
    • Writing Skillsunmatched

    Description

    Role Purpose

    Lead the delivery of a NIST CSF 2.0 cybersecurity gap and maturity assessment for a global enterprise program, covering assessment planning, stakeholder engagement, evidence review, maturity scoring, risk based gap prioritization, executive reporting, and development of a practical improvement roadmap.

    Key Responsibilities

    • Own end to end engagement governance, project planning, milestones, risks, dependencies, status reporting, and stakeholder communications.
    • Conduct NIST CSF 2.0 maturity assessment across functions, categories, subcategories, implementation tiers, and profiles.
    • Review policies, standards, procedures, controls, risk registers, asset inventories, KPIs/KRIs, and supporting evidence.
    • Facilitate interviews and workshops with cybersecurity, risk, compliance, technology, and business stakeholders.
    • Define defensible maturity scoring, identify control gaps, assess business risk, and prioritize remediation actions.
    • Develop executive ready assessment reports, maturity dashboards, prioritized recommendations, and near/mid/long term roadmap.

    Required Experience

    AreaRequirement
    Total Experience10 to 15 years in cybersecurity, GRC, risk management, audit, security consulting, or cybersecurity program assessment.
    NIST CSF ExpertiseStrong hands on experience with NIST CSF, preferably NIST CSF 2.0 maturity assessments.
    Framework MappingExperience mapping controls across NIST CSF, ISO 27001, NIST 800 53, CIS Controls, SOC 2, or similar frameworks.
    Assessment DeliveryProven experience conducting enterprise wide cybersecurity maturity, gap, risk, or control assessments.
    Stakeholder ManagementAbility to conduct interviews/workshops with senior security, risk, compliance, technology, and business stakeholders.
    Executive ReportingStrong experience creating leadership ready cybersecurity reports, maturity dashboards, and roadmap presentations.
    Consulting DeliveryExperience working in consulting/advisory environments with structured methodology, governance, and client facing deliverables.
    Risk PrioritizationAbility to convert control gaps into risk ranked remediation recommendations and practical roadmaps.

    Required Skills

    • Strong expertise in NIST CSF 2.0, cybersecurity governance, risk management, compliance, control maturity models, and ISO 27001 / ISMS.
    • Ability to map controls across NIST CSF, ISO 27001, NIST 800 53, CIS Controls, SOC 2, and similar frameworks.
    • Experience in evidence based assessment, maturity scoring, risk based gap prioritization, and remediation roadmap development.
    • Excellent consulting delivery, workshop facilitation, stakeholder management, executive reporting, and written/verbal communication skills.

    Preferred Certifications

    • CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor / Lead Implementer, NIST CSF training/certification, PMP / Prince2 / Agile certification preferred.

    Tools / Platforms Knowledge Preferred

    • GRC and evidence management platforms such as Archer, ServiceNow GRC, OneTrust, MetricStream, SharePoint, Teams, Excel, PowerPoint, Visio, Power BI, and cybersecurity KPI/KRI dashboarding tools.

    Numbers & Facts

    LocationNULL, CA

    Resume Resources

    Free Resume TemplatesFree Resume Builder

    Similar Jobs