IT/Security Consultant- 3 Month Project at Blooming Health

Job Title: IT/Security Consultant – NIST Audit Readiness (3-Month Contract)

Location: Remote

Duration: 3 Months (Contract)

About Us:

Blooming Health is on a mission to transform social care for older adults and underserved populations. We partner with community organizations, government agencies, and healthcare stakeholders to build a digital tissue in the community for automating access to social care and advancing health equity.

Job Summary:

We are seeking an experienced IT/Security Consultant to assist our organization in preparing for an upcoming NIST audit. This role will focus on developing and refining security policies, procedures, and documentation, as well as gathering the necessary evidence and artifacts to ensure audit readiness under very tight deadlines. The ideal candidate will have a strong background in information security, compliance, and risk management, with hands-on experience in aligning security controls and compliance frameworks, esp NIST 800-53.

Key Responsibilities:

• Collect and organize IT/security related evidence and artifacts required for the audit process.
• Liaise closely with Blooming Health IT manager and external security consultants
• Conduct internal reviews and readiness assessments to validate compliance efforts.
• Assist with security awareness and training efforts as needed.

Required Skills:

• Proven experience in IT security, compliance, and risk management.
• Strong understanding of audit processes and requirements
• Experience developing security policies, procedures, and documentation.
• Ability to assess and remediate security control gaps.
• Excellent analytical, organizational, and communication skills.
• Ability to work fast in a high pressure environment to meet tight deadlines

Preferred Skills:

• Familiarity with security tools and GRC platforms for compliance tracking.
• Experience with federal or government contracting compliance requirements.
• Experience working with security frameworks such as ISO 27001, CIS, or FedRAMP is a plus.
• Relevant certifications (e.g., CISSP, CISA, CISM, CRISC, CAP) are a plus.
• Hands-on experience with NIST frameworks (e.g., NIST 800-53, NIST CSF, NIST 800-171).

Compensation:

• Competitive contract rate based on experience.