Cyber Security Consultant

We are seeking an experienced Cyber Security Consultant to support a large-scale Information Security maturity assessment within a leading financial services environment. This assignment is focused on conducting and evolving a NIST Cybersecurity Framework (CSF) maturity assessment in collaboration with key business and technology stakeholders.

Description of the Role: The consultant will reassess existing NIST CSF maturity ratings through workshops, stakeholder engagement, and structured analysis to ensure consistency with prior assessments while enhancing the framework for future use. Working closely with internal representatives, the consultant will facilitate discussions, gather evidence, validate findings, and calibrate maturity ratings. The role requires strong analytical capabilities, excellent stakeholder management skills, and the ability to communicate technical security concepts to both technical and non-technical audiences. The assignment includes reporting activities and regular on-site collaboration two days per week.

Responsibilities:

• Review and enhance the existing NIST CSF assessment workbook to ensure both backward compatibility and future usability.
• Support planning and coordination of assessment workshops and stakeholder engagements.
• Facilitate kick-off meetings, workshops, and interviews with approximately 70 stakeholders.
• Collect, document, and analyze assessment data to support maturity rating evaluations.
• Validate findings, justify ratings, and perform calibration activities where required.
• Produce and present both technical and executive-level assessment reports.

Qualifications:

• Proven experience conducting NIST CSF maturity assessments.
• Strong understanding of Information Security, Cyber Risk Management, and industry security practices.
• Experience delivering similar maturity assessments within the Financial Services Industry.
• Excellent written and verbal communication skills in English, with the ability to engage stakeholders at all organizational levels.
• Strong analytical, structured, and reporting capabilities, including translating complex findings into business-friendly insights.
• Relevant certifications such as CISM, ISO 27001, ISO 22301, or equivalent are considered an advantage, along with 5+ years of Information Security experience.

Start date: 01.11.26 End date: 31.08.27 Location: Copenhagen, Denmark Required skills NIST Stakeholder Managenet Information Security IT Risk Management Languages English: (Proficient)