GRC, Cyber Security Data Architect
San Francisco, CA
Lead the delivery of cybersecurity gap and maturity assessment for a global enterprise program, covering assessment planning, stakeholder engagement, evidence review, maturity scoring, risk based gap prioritization, executive reporting, and development of a practical improvement roadmap.
10 to 15 years in cybersecurity, GRC, risk management, audit, security consulting, or cybersecurity program assessment.
Strong hands on experience with NIST CSF, preferably NIST CSF 2.0 maturity assessments.
Experience mapping controls across NIST CSF, ISO 27001, NIST 800 53, CIS Controls, SOC 2, or similar frameworks.
Proven experience conducting enterprise wide cybersecurity maturity, gap, risk, or control assessments.
Ability to conduct interviews/workshops with senior security, risk, compliance, technology, and business stakeholders.
Strong experience creating leadership ready cybersecurity reports, maturity dashboards, and roadmap presentations.
Experience working in consulting/advisory environments with structured methodology, governance, and client facing deliverables.
Ability to convert control gaps into risk ranked remediation recommendations and practical roadmaps.
Required Skills
Strong expertise in NIST CSF 2.0, cybersecurity governance, risk management, compliance, control maturity models, and ISO 27001 / ISMS.
Ability to map controls across NIST CSF, ISO 27001, NIST 800 53, CIS Controls, SOC 2, and similar frameworks.
Experience in evidence based assessment, maturity scoring, risk based gap prioritization, and remediation roadmap development.
Suresh
TekisHub, an EEO Employer
We value diversity and are dedicated to fostering an inclusive workplace of Equal Employment Opportunity where everyone is empowered to succeed. All employment decisions are based on qualifications, merit, and business needs.