Location: Rancho Cucamonga, California (Onsite day 1)

Duration: Long Term

Role Overview: As a Principal Architect specializing in Cybersecurity Program Maturity Assessment, Candidate will be responsible for evaluating and assessing the maturity of cybersecurity programs within organizations. Candidate will provide expert guidance and recommendations to enhance the overall security posture and resilience of the organization's cybersecurity initiatives. Candidate will work closely with stakeholders, including C-level executives, security teams, and IT departments, to understand current practices, identify gaps, and develop a roadmap for improvement. Candidate's expertise in cybersecurity frameworks, industry best practices, and program assessment methodologies will be instrumental in guiding organizations towards achieving a mature and robust cybersecurity program.

Responsibilities:

1. Conduct Cybersecurity Program Assessments:

• Evaluate the effectiveness and maturity of the organization's cybersecurity program, including policies, processes, and technologies.
• Assess the alignment of cybersecurity initiatives with industry standards, frameworks (such as NIST, HIPAA, ISO 27001, CIS), and regulatory requirements.
• Understanding of the California state cyber security requirements & regulations
• Identify strengths, weaknesses, and areas for improvement within the cybersecurity program.

2. Develop Program Maturity Roadmap:

• Collaborate with stakeholders to develop a roadmap for enhancing the organization's cybersecurity program maturity.
• Define strategic goals, objectives, and milestones for each phase of the roadmap.
• Provide recommendations on technical and procedural improvements to enhance the overall security posture.

3. Perform Gap Analysis:

• Identify gaps between the current cybersecurity program and desired maturity levels.
• Conduct in-depth analysis of existing policies, procedures, and controls to identify areas requiring improvement.
• Propose remediation strategies and action plans to address identified gaps.

4. Provide Expert Guidance:

• Serve as a subject matter expert, providing guidance and recommendations to stakeholders on cybersecurity program enhancements.
• Advise on the implementation of best practices, emerging technologies, and industry trends related to cybersecurity.

5. Collaborate with Stakeholders:

• Engage with C-level executives, security teams, and IT departments to gather information, discuss findings, and present recommendations.
• Facilitate workshops and meetings to educate stakeholders on the importance of cybersecurity program maturity and its impact on organizational risk management.

6. Stay Abreast of Industry Developments:

• Continuously update knowledge of cybersecurity frameworks, regulations, and emerging threats.
• Stay informed about advancements in cybersecurity technologies, tools, and methodologies.

Requirements:

• Experience (18+ years) in cybersecurity, including program assessments and maturity evaluations.
• In-depth knowledge of cybersecurity frameworks (NIST, ISO 27001, CIS), industry standards, and regulatory requirements.
• Strong understanding of cybersecurity controls, risk management, and security best practices.
• Proven experience in developing program maturity roadmaps and remediation plans.
• Excellent analytical and problem-solving skills, with the ability to think strategically and identify gaps.
• Strong communication and presentation skills, with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, CRISC, or similar certifications are preferred.