Job Description
Key Skills: Technology Controls, GRC, Security, NIST/ISO, SC Clearance We are looking for Technology Control Frameworks Lead at Wokingham, UK - 2-3 days per week Onsite Security Clearance: Active SC Clearance is must have Technology Control Framework - Project, Resource Responsibilities: Design and develop the Technology Control Framework: Create a single, coherent and practical set of technology, cyber security and IT controls, with clear control objectives and measurable requirements that can be consistently understood and applied across the client. Consolidate frameworks, standards and regulatory requirements: Analyse and rationalise ISO/IEC 27001:2022, NIST SP 800-53, NIST CSF, Cyber Assessment Framework (CAF), Cyber Essentials Plus and applicable legal/regulatory obligations, identifying overlaps, duplication, conflicts and gaps to produce an integrated control set. Establish control mapping, traceability and applicability: Map each control to its originating framework, standard and regulatory requirements, maintaining traceability to demonstrate coverage and identify gaps, while defining applicability across relevant technologies, services, processes and information asset types. Define control governance and assessment: Establish control ownership and accountability with Technology, Security, Risk and First Line stakeholders, alongside maturity and assessment criteria that enable consistent measurement of control implementation and effectiveness. Engage SMEs and ..... full job details .....