What are the responsibilities and job description for the Security Consultant (NIST-800) position at Feuji?
Feuji Inc is a global technology solutions company that strives to be a trusted partner in your digital transformation journey, with a focus on empowering your organization to shift IT from a cost center to a revenue generating powerhouse focused on Cloud, Data science, and Cyber security. We are an Award-Winning IT Professional Services & Consulting firm HQ in Dallas, nearshore office in Costa Rica and have offshore offices in India.
Job Title: Security Consultant (NIST-800)
Location: Westlake, Tx
Type: 12 Months Contract to Hire
Role Overview:
The NIST 800 Specialist/Consultant is responsible for implementing, maintaining, and managing compliance with the National Institute of Standards and Technology (NIST) Special Publication 800 series. This role involves assessing security frameworks, developing policies, and ensuring an organization's adherence to NIST standards, particularly in cybersecurity, risk management, and data protection.
Key Responsibilities:
- Compliance Implementation:
- Develop and implement policies and procedures to meet NIST 800 standards, such as NIST 800-53, NIST 800-171, and NIST Cybersecurity Framework (CSF).
- Ensure compliance with regulatory requirements, including CMMC (Cybersecurity Maturity Model Certification), DFARS, or other federal mandates.
- Risk Assessment and Management:
- Conduct regular risk assessments to identify vulnerabilities in systems, processes, and networks.
- Develop Risk Management Frameworks (RMF) in alignment with NIST guidelines.
- Implement remediation plans for identified risks.
- Security Control Design and Documentation:
- Define, implement, and manage security controls as outlined in NIST 800-53 or other applicable standards.
- Maintain documentation for System Security Plans (SSPs), Plan of Actions and Milestones (POA&M), and other compliance artifacts.
- Audit Preparation and Support:
- Assist in preparing for audits and assessments related to NIST standards.
- Provide evidence and reports required for certification and compliance validation.
- Training and Awareness:
- Conduct training sessions for employees on NIST 800 standards, cybersecurity best practices, and compliance requirements.
- Develop materials to increase awareness of organizational security policies.
- Continuous Monitoring:
- Implement continuous monitoring tools and techniques to track security posture.
- Respond to incidents, perform root cause analyses, and apply NIST-compliant corrective actions.
Required Qualifications:
- Experience:
- 3 years of experience in cybersecurity, IT governance, or compliance.
- Proven expertise with NIST 800 series standards (800-53, 800-171, 800-30, etc.).
- Hands-on experience with risk assessments, security audits, or vulnerability management.
- Technical Knowledge:
- Familiarity with frameworks like RMF, FISMA, and CMMC.
- Knowledge of security tools (SIEM, vulnerability scanners, etc.).
- Understanding of encryption, access controls, and secure system architecture.
- Certifications (preferred):
- CISSP, CISM, CAP, or equivalent.
- CompTIA Security , CEH, or other security certifications.
Thanks & Regards,
Mahi
Lead Technical Recruiter | Feuji, Inc
105 Decker court, Suite # 850, Irving, Tx, 75062
E: Mahi.v@feuji.com
USA | Costa Rica | India
