ZipRecruiter

Log In

1

Information Security Risk Management Consultant Jobs in Indiana

previous page

Showing results 41-60

All JobsInformation Security Risk Management Consultant JobsInformation Security Risk Management Consultant Jobs in Indiana

Information Security Risk Management Consultant information

What does an information security risk management consultant do?

An Information Security Risk Management Consultant helps organizations identify, assess, and mitigate risks related to their information systems and data. They analyze potential threats and vulnerabilities, develop strategies to protect sensitive information, and ensure compliance with relevant regulations and standards. Their work often includes conducting risk assessments, recommending security controls, and advising on best practices to minimize security incidents and data breaches.

What are some typical challenges faced by information security risk management consultants when working with diverse clients?

Information Security Risk Management Consultants often encounter challenges such as adapting to varying levels of security maturity across clients, managing conflicting stakeholder priorities, and ensuring compliance with different regulatory frameworks. Navigating these complexities requires strong communication skills, flexibility, and the ability to tailor risk mitigation strategies for each unique environment. Successful consultants are adept at building trust and educating clients on the importance of proactive risk management, often acting as both advisors and change agents within organizations.

What are the key skills and qualifications needed to thrive as an information security risk management consultant, and why are they important?

To thrive as an Information Security Risk Management Consultant, you need a solid background in cybersecurity principles, risk assessment methodologies, and regulatory compliance, typically supported by a relevant degree and certifications like CISSP or CISM. Familiarity with risk management frameworks (such as NIST or ISO 27001), vulnerability assessment tools, and governance, risk, and compliance (GRC) platforms is essential. Strong analytical thinking, communication, and stakeholder management skills help consultants effectively identify risks and articulate recommendations to diverse audiences. These skills ensure organizations can proactively manage security risks, comply with regulations, and safeguard critical assets.

What is the difference between Information Security Risk Management Consultant vs Cybersecurity Analyst?

AspectInformation Security Risk Management ConsultantCybersecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISACISSP, CompTIA Security+, CEH
Work EnvironmentAdvisory roles, risk assessments, policy developmentMonitoring security systems, incident response, threat analysis
Employer & IndustryConsulting firms, large corporations, government agenciesIT departments, security operations centers, tech companies

While both roles focus on cybersecurity, the Information Security Risk Management Consultant primarily assesses and manages risks through policies and frameworks, whereas the Cybersecurity Analyst actively monitors and responds to security threats. The consultant provides strategic guidance, while the analyst handles day-to-day security operations.

What cities in Indiana are hiring for Information Security Risk Management Consultant jobs?

Cities in Indiana with the most Information Security Risk Management Consultant job openings:

Information Assurance Specialist - I (Information Security Analyst)

Camp Atterbury, IN • On-site

Barbaricum
National Security • 201 - 500 employees
Learn more about Barbaricumexternal

Full-time

Re-posted 13 days ago

Job description

Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.

Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team.

Barbaricum is seeking an Information Assurance Specialist I (Information Security Analyst) to support cybersecurity compliance, risk management, and security control assessment activities for Department of Defense (DoD) systems. The selected candidate will assist in evaluating security controls, supporting Security Assessment and Authorization (SA&A) efforts, and maintaining compliance with applicable cybersecurity frameworks and regulatory requirements.

The Information Assurance Specialist will support continuous monitoring and ongoing authorization activities, collaborate with technical teams to strengthen system security, and help ensure compliance with the Risk Management Framework (RMF), NIST standards, and DoD cybersecurity policies. The successful candidate will contribute to the protection and operational readiness of mission-critical information systems and infrastructure.

Responsibilities:

  • Support cybersecurity compliance, risk management, and information assurance activities for Department of Defense (DoD) systems and networks.
  • Assist in assessing and validating security controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD requirements.
  • Support the Security Assessment and Authorization (SA&A) process by reviewing control implementations, identifying risks, and documenting findings.
  • Participate in continuous monitoring and ongoing authorization activities to help maintain system security posture and compliance.
  • Assist with vulnerability assessments, security reviews, and remediation tracking efforts across enterprise environments.
  • Collaborate with system administrators, engineers, and cybersecurity personnel to implement and maintain required security controls.
  • Develop and maintain cybersecurity documentation, including assessment reports, compliance artifacts, and authorization support materials.
  • Monitor security-related activities and provide recommendations for risk mitigation and control improvements.
  • Support compliance with the Risk Management Framework (RMF), organizational policies, and applicable federal and DoD cybersecurity standards.
  • Stay informed on cybersecurity threats, vulnerabilities, and best practices to support effective information assurance operations.


Required Qualifications:

  •  Active DoD Secret Clearance
  • Bachelor's degree in related field.
  • Meet DoDM 8140.03 IAT III/IAM II requirements
  •  Minimum 2yr experience in network operations and information security.
  • Demonstrated experience assessing security controls based on cybersecurity principles and tenets. (e.g., NIST SP 800-53, Cybersecurity Framework, etc.). 
  • In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&SA process. 
  • Demonstrated experience with continuous monitoring/ongoing authorization.es

EEO Commitment

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.