Cybersecurity Consultant

Key Responsibilities

• NYDFS Compliance Assessments
• Perform NYDFS cybersecurity regulation assessments and Security Control Assessments
• Evaluate compliance with 23 NYCRR Part 500 requirements.
• Conduct regulatory readiness and examination support reviews.
• Assess control design and operating effectiveness.
• Develop compliance scorecards and maturity assessments.
• Operational NYDFS evidence tracking across in-scope applications (with clear status and aging visibility.
• Validated and organized evidence artifacts maintained in the agreed repository structure and naming convention.
• A prioritized list of out-of-compliance risk assessments and a remediation action plan (where applicable).
• Weekly status update package (progress, blockers, top risks, at-risk items, next steps).
• A documented process improvement plan for the annual NYDFS attestation cycle (templates, cadence, QA checks, escalation path, and metrics).
• Work closely with external application vendor contacts to ensure application compliance and customer s applications / data remain secure.

IT Audit Activities

• Execute risk based IT audits.
• Develop audit plans, audit programs, and test procedures.
• Conduct walkthroughs and control validation.
• Review evidence and perform sample testing.
• Document audit observations and recommendations.
• Prepare audit workpapers and audit report

Client Advisory

• Facilitate stakeholder workshops.
• Present assessment findings to executive leadership.
• Advise CISOs, CIOs, and compliance teams on NYDFS requirements.
• Assist customers in developing target operating models.
• Support cybersecurity program modernization initiatives

Required Sills (Must have)

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.
• Strong English communication skills (written and verbal); ability to drive follow-ups with business stakeholders and vendor contacts.
• Experience coordinating evidence/artifact collection for audits, attestations, or regulatory requirements.
• Strong organization skills: tracking, repository hygiene, and maintaining audit-ready traceability.
• Ability to validate evidence for completeness and applicability; escalate gaps and drive closure.
• Project management fundamentals (status reporting, issue/risk escalation, etc).
• 5+ years of cybersecurity, risk, or compliance consulting experience.
• Strong understanding of NYDFS Cybersecurity Regulation (23 NYCRR Part 500).
• Experience conducting cybersecurity assessments and regulatory compliance reviews.
• Knowledge of cybersecurity governance and risk management practices.
• Excellent communication and client-facing skills.

Preferred Certifications :: CISSP, CISA, CISM, CRISC