> Markdown version of [/jobs/ext/2443224-cybersecurity-consultant](https://www.wearedevelopers.com/jobs/ext/2443224-cybersecurity-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Consultant - **Company:** TekFortune INC - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Data Auditing, Information Technology Audit, Information Technology - **Published:** August 22, 2026 - **Apply:** https://www.dice.com/job-detail/8983eb0d-3838-4f10-823e-e7f014f9426e ## About the Role Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field. * Strong English communication skills (written and verbal); ability to drive follow-ups with business stakeholders and vendor contacts. * Experience coordinating evidence/artifact collection for audits, attestations, or regulatory requirements. * Strong organization skills: tracking, repository hygiene, and maintaining audit-ready traceability. * Ability to validate evidence for completeness and applicability; escalate gaps and drive closure. * Project management fundamentals (status reporting, issue/risk escalation, etc). * 5+ years of cybersecurity, risk, or compliance consulting experience. * Strong understanding of NYDFS Cybersecurity Regulation (23 NYCRR Part 500). * Experience conducting cybersecurity assessments and regulatory compliance reviews. * Knowledge of cybersecurity governance and risk management practices. * Excellent communication and client-facing skills. Preferred Certifications : CISSP, CISA, CISM, CRISC ## Description * NYDFS Compliance Assessments * Perform NYDFS cybersecurity regulation assessments and Security Control Assessments * Evaluate compliance with 23 NYCRR Part 500 requirements. * Conduct regulatory readiness and examination support reviews. * Assess control design and operating effectiveness. * Develop compliance scorecards and maturity assessments. * Operational NYDFS evidence tracking across in-scope applications (with clear status and aging visibility. * Validated and organized evidence artifacts maintained in the agreed repository structure and naming convention. * A prioritized list of out-of-compliance risk assessments and a remediation action plan (where applicable). * Weekly status update package (progress, blockers, top risks, at-risk items, next steps). * A documented process improvement plan for the annual NYDFS attestation cycle (templates, cadence, QA checks, escalation path, and metrics). * Work closely with external application vendor contacts to ensure application compliance and customer s applications / data remain secure. IT Audit Activities * Execute risk based IT audits. * Develop audit plans, audit programs, and test procedures. * Conduct walkthroughs and control validation. * Review evidence and perform sample testing. * Document audit observations and recommendations. * Prepare audit workpapers and audit report Client Advisory * Facilitate stakeholder workshops. * Present assessment findings to executive leadership. * Advise CISOs, CIOs, and compliance teams on NYDFS requirements. * Assist customers in developing target operating models. * Support cybersecurity program modernization initiatives ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [A walkthrough on Responsible AI Frameworks and Case Studies](https://www.wearedevelopers.com/videos/509-a-walkthrough-on-responsible-ai-frameworks-and-case-studies) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)