About this role
Cybersecurity Specialist for a nonprofit, focusing on organizational risk assessments, OSINT, vulnerability assessments, and security awareness programs for beneficiaries.
Key Responsibilities
- Plan, manage, and conduct organizational assessments; Draft Organization Security Risk Assessment (OSRA) reports; Develop organizational Action Plans (APs); Lead design of Security Awareness Program; Collaborate with SOC and beneficiaries
Technical Overview
Expertise in CIS Controls, NIST CSF, ISO 27001 with hands-on vulnerability scanning, penetration testing, OSINT, and security awareness program development and delivery.
Ideal Candidate
The ideal candidate is a consultant with strong organizational cybersecurity risk assessment experience, CIS/NIST/ISO framework familiarity, OSINT capabilities, and experience delivering security awareness programs to beneficiaries.
Must-Have Skills
Organizational Assessments – Assessments Execution: Experience leading end-to-end security auditsFramework Guided Assessments – CIS CSCNIST CSFISO 27001Vulnerability Scanning – Nessus/Qualys/Rapid7Risk Analysis and Reporting – quantifying vulnerabilities for non-technical stakeholders
Nice-to-Have Skills
Fluency in SpanishArabicRussianand/or FrenchExisting relationships with civil society organizationsBachelor’s degree in information or computing sciences
Required Skills
Organizational AssessmentsCIS ControlsNIST CSFISO 27001Vulnerability scanningNessusQualysRapid7OSINTVulnerability remediationPolicy & Control EvaluationSecurity Awareness ProgramsPhishing SimulationsKnowBe4Infosec IQOSRASAP
Hard Skills
CIS ControlsNIST CSFISO 27001OSINTVulnerability scanningTenable NessusQualysRapid7Risk analysisPenetration testingSecurity awareness programsSAPKnowBe4Infosec IQOSRAPolicy & control evaluationDocumentation
Soft Skills
Strong verbalwrittenand listening communicationAbility to work independentlyInterpersonal skills
Keywords for Your Resume
cybersecurity specialistorganization security risk assessmentCIS Controls v8.1NIST CSFISO 27001OSINTvulnerability scanningPenetration testingSecurity Awareness ProgramSAPKnowBe4Infosec IQOSRApolicy documentationmonitoring and evaluationenglish communicationpenetration testingsecurity awareness program
Get matched to jobs like this
Luna finds roles that fit your skills and career goals — no endless scrolling required.
Create a Free Profile