Cybersecurity Consultant

Position: Cybersecurity Consultant Location: Remote 

Note: Client is not willing to sponsor any visa.     
 
Key Responsibilities

• NYDFS Compliance Assessments

• Perform NYDFS cybersecurity regulation assessments and Security Control Assessments

• Evaluate compliance with 23 NYCRR Part 500 requirements.

• Conduct regulatory readiness and examination support reviews.

• Assess control design and operating effectiveness.

• Develop compliance scorecards and maturity assessments.

• Operational NYDFS evidence tracking across in-scope applications (with clear status and aging visibility.

• Validated and organized evidence artifacts maintained in the agreed repository structure and naming convention.

• A prioritized list of out-of-compliance risk assessments and a remediation action plan (where applicable).

• Weekly status update package (progress, blockers, top risks, at-risk items, next steps).

• A documented process improvement plan for the annual NYDFS attestation cycle (templates, cadence, QA checks, escalation path, and metrics).

• Work closely with external application vendor contacts to ensure application compliance and customer s applications / data remain secure.

  
IT Audit Activities

• Execute risk based IT audits.

• Develop audit plans, audit programs, and test procedures.

• Conduct walkthroughs and control validation.

• Review evidence and perform sample testing.

• Document audit observations and recommendations.

• Prepare audit workpapers and audit report

  
Client Advisory

• Facilitate stakeholder workshops.

• Present assessment findings to executive leadership.

• Advise CISOs, CIOs, and compliance teams on NYDFS requirements.

• Assist customers in developing target operating models.

• Support cybersecurity program modernization initiatives

Required Sills (Must have)

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.

• Strong English communication skills (written and verbal); ability to drive follow-ups with business stakeholders and vendor contacts.

• Experience coordinating evidence/artifact collection for audits, attestations, or regulatory requirements.

• Strong organization skills: tracking, repository hygiene, and maintaining audit-ready traceability.

• Ability to validate evidence for completeness and applicability; escalate gaps and drive closure.

• Project management fundamentals (status reporting, issue/risk escalation, etc).

• 5+ years of cybersecurity, risk, or compliance consulting experience.

• Strong understanding of NYDFS Cybersecurity Regulation (23 NYCRR Part 500).

• Experience conducting cybersecurity assessments and regulatory compliance reviews.

• Knowledge of cybersecurity governance and risk management practices.

• Excellent communication and client-facing skills.

Preferred Certifications : CISSP, CISA, CISM, CRISC