Position Summary: 

Location: Rockville, MD

Job Requirements:

• Contractor will be a direct report to the County’s Enterprise Information Security Officer, and also receive direction from the Enterprise Information Security Office Project Manager.

• Contractor will work side-by-side with County staff to facilitate knowledge transfer.

Responsibilities:

• Responsible for leading the review existing information security policies, to identify and a) areas to be updated and b) areas where additional policies are warranted.

• Responsible for researching information security policy ‘best practices’ for application to County policies.

• Responsible for preparing weekly status report that will include:

  • Work completed

  • Work planned for the next 1+ week(s)

  • Risks

  • Items for escalation

• Responsible for preparing recommendations including language, where appropriate, for updates or new policy content.

• Responsible for preparing a “Policy Review Findings Report” compiling findings and recommendations that will include:

  • Policy Gap Analysis

  • Gap Risk Assessment

  • Policies Update Recommendations

  • New Policy Identification/Recommendations

Qualifications / Experience / Education:

• Subject Matter Expertise (SME) in the following:

  • NIST SP 800-87 Standards

  • ISO/IEC 27000 Standards

  • Performing client/customer interviews

  • Leading policy team(s) in the review, update, and definition of security policies

• Minimum of five (5) years of experience in the development, documentation and maintenance of information security policies

• Minimum of five (5) years of experience in performing client/customer interviews

Apply:  Please send a cover letter and resume along with your salary requirements to resumes@nucrest.com.

Nucrest is an equal opportunity affirmative action employer and administers all personnel practices without regard to race, color, religion, sex, age, national origin, disability, sexual orientation, gender identity or expression, marital status, veteran status, genetics or any other category protected under applicable law.