Senior Secret Cleared Business Consultant (10+ Years) specializing in Cyber Security to create and design a template and user guides for Core Cyber Awarene

Our valued Public Sector client is seeking a Senior Secret Cleared Business Consultant (10+ Years) specializing in Cyber Security to create and design a template and user guides for Core Cyber Awareness Concepts within the Public Sector

Must Haves:

• Secret Clearance
• 5+ years developing Cyber Security documentation, templates and guides for cyber security user awareness and core cyber awareness concepts

Tasks:

• Documenting and development of guides and re-usable templates focusing on user awareness to foster a security-minded workforce
• Researching and monitoring leading industry standards recommendations (NIST, CCS, ITSG-33 guidelines)
• Creation of educational initiatives on secure coding practices
• Creation of guides for core cyber awareness concepts such as:
• Secure Practices: Promoting safe habits for daily operations.
• Safe Browsing: Educating on how to browse the internet safely.
• Data Classification: Teaching employees how to classify and handle sensitive data properly.
• Removable Media Risks: Understanding the risks of using USB drives and other external devices.
• Incident Response: Although less of a focus, employees should still have an understanding of the basics of incident response.
• Recognizing Security Incidents: Teaching employees how to identify potential security threats.
• Balancing Personal and Work Security: Differentiating between personal and work-related security practices, especially with remote work and social media.
• Unauthorized Apps: Educating employees about the dangers of using unauthorized applications or software.
• Remote Work Security: Reinforcing the importance of maintaining security while working remotely.
• Social Media Awareness: Teaching users about the potential security risks associated with personal social media usage.

Deliverables:

• Develop Training Materials: Ensure the development of engaging and informative materials that cover the identified security topics.
• Establish Training Schedule: Set up quarterly training sessions and ensure they align with the organization’s planning priorities.
• Monitor Industry Recommendations: Keep track of cybersecurity standards from NIST, CCS, and ITSG-33 to ensure the organization's practices are up-to-date.
• Focus on Developers: Tailor some of the training specifically for the developer community within the organization, covering secure coding and development practices.