A cybersecurity consultant is needed to develop a comprehensive set of cybersecurity policies and procedures for our medium-sized organization (150 employees). This project involves assessing current practices, identifying gaps, and drafting policies covering areas like data handling, access control, incident response, and employee training. Compliance with industry standards (e.g., NIST, ISO 27001) is a key objective. CISSP or CISM certification is highly preferred.