Instructor - Educational Assessment jobs in Queens Village, NY

• Position Details:
• Title: Security and Risk Assessment Consultant.
• Location: Flushing, NY 11373.
• Working Hours: Monday through Friday, 9 am to 5 pm (excluding holidays).
• Contract Duration: 3 years.
• Certifications:
• CCMI (Capability Maturity Model Integration) certification at level 2, 3, or higher.

The assessment shall be conducted based on an agreed upon schedule between the PM and the Contractor.

• Review current vendor management process, including policies and procedures, and governance.
• Obtain the inventory of vendors and third-party relationships, provided by the PM.
• Categorize vendors based on risk levels derived from vendor’s products and services.
• Establish interim vendor life cycle management process, including workflows, governance, and tools.
• Develop a comprehensive future state vendor management program design and implementation roadmap.
• Present final project documents, findings, and recommendations to executive management.

Risk Assessments

• The Consultant shall assess ten (10) vendors identified by the PM for cyber risk to customer using National Institute of Standards and Technology (NIST) 800-53 or other applicable standards related to Security and Privacy Controls for Information Systems and Organizations.
• Provide a report (in unlocked pdf) detailing finding, and recommendations

THREE INCIDENT RESPONSE PLAYBOOKS

• Develop three Incident Response playbooks and perform corresponding simulated tabletop exercises. The playbook should be issued by the Consultant at the conclusion of each assessment.
• The Consultant shall provide an updated playbook at the end of the annual assessment. The vendor should provide the playbook in an unlocked PDF file.

PROGRESS REPORTS

• Monthly progress reports
• A report at the conclusion of the annual assessment
• A final report of findings and remediation

Job Type: Contract

Salary: $70,760.99 - $75,690.66 per year

Experience level:

• 10 years
• 11 years

Schedule:

• 8 hour shift
• Monday to Friday

Application Question(s):

• W2 or C2C
• Work Authorization (USC OR GC OR H4EAD OR H1B)

Experience:

• "Security and Risk Assessment Consultant": 10 years (Preferred)
• "Risk Management Program": 10 years (Preferred)
• National Institute of Standards and Technology (NIST) 800-: 9 years (Preferred)
• Capability Maturity Model Integration: 10 years (Preferred)

License/Certification:

• CCMI (Capability Maturity Model Integration ) (Preferred)

Work Location: On the road