Cybersecurity Consultant
- E-Solutions Inc.
1 Days Ago
NA
W2
Remote
6-10 Years
Required Skills: Firewalls, IDS, IPS, VPNs, Cloud security, Cryptography
Job Description
Key Responsibilities
- NYDFS Compliance Assessments
- Perform NYDFS cybersecurity regulation assessments and Security Control Assessments
- Evaluate compliance with 23 NYCRR Part 500 requirements.
- Conduct regulatory readiness and examination support reviews.
- Assess control design and operating effectiveness.
- Develop compliance scorecards and maturity assessments.
- Operational NYDFS evidence tracking across in-scope applications (with clear status and aging visibility.
- Validated and organized evidence artifacts maintained in the agreed repository structure and naming convention.
- A prioritized list of out-of-compliance risk assessments and a remediation action plan (where applicable).
- Weekly status update package (progress, blockers, top risks, at-risk items, next steps).
- A documented process improvement plan for the annual NYDFS attestation cycle (templates, cadence, QA checks, escalation path, and metrics).
- Work closely with external application vendor contacts to ensure application compliance and customer’s applications / data remain secure.
IT Audit Activities
- Execute risk based IT audits.
- Develop audit plans, audit programs, and test procedures.
- Conduct walkthroughs and control validation.
- Review evidence and perform sample testing.
- Document audit observations and recommendations.
- Prepare audit workpapers and audit report
Client Advisory
- Facilitate stakeholder workshops.
- Present assessment findings to executive leadership.
- Advise CISOs, CIOs, and compliance teams on NYDFS requirements.
- Assist customers in developing target operating models.
- Support cybersecurity program modernization initiatives
Required Sills (Must have)
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.
- Strong English communication skills (written and verbal); ability to drive follow-ups with business stakeholders and vendor contacts.
- Experience coordinating evidence/artifact collection for audits, attestations, or regulatory requirements.
- Strong organization skills: tracking, repository hygiene, and maintaining audit-ready traceability.
- Ability to validate evidence for completeness and applicability; escalate gaps and drive closure.
- Project management fundamentals (status reporting, issue/risk escalation, etc).
- 5+ years of cybersecurity, risk, or compliance consulting experience.
- Strong understanding of NYDFS Cybersecurity Regulation (23 NYCRR Part 500).
- Experience conducting cybersecurity assessments and regulatory compliance reviews.
- Knowledge of cybersecurity governance and risk management practices.
- Excellent communication and client-facing skills.
Preferred Certifications : CISSP, CISA, CISM, CRISC
