NYDFS Cybersecurity Compliance Consultant - Remote / Telecommute

• Perform NYDFS cybersecurity regulation assessments and Security Control Assessments.
• Evaluate compliance with 23 NYCRR Part 500 requirements.
• Conduct regulatory readiness and examination support reviews.
• Assess control design and operating effectiveness.
• Develop compliance scorecards and maturity assessments.
• Track operational NYDFS evidence across in-scope applications with clear status and aging visibility.
• Maintain validated and organized evidence artifacts in the agreed repository structure and naming convention.
• Develop a prioritized list of out-of-compliance risk assessments and a remediation action plan.
• Provide weekly status update packages covering progress, blockers, top risks, and next steps.
• Document process improvement plans for the annual NYDFS attestation cycle including templates, cadence, and QA checks.
• Work closely with external application vendor contacts to ensure application compliance and data security.
• Execute risk-based IT audits.
• Develop audit plans, audit programs, and test procedures.
• Conduct walkthroughs and control validation.
• Review evidence and perform sample testing.
• Document audit observations and recommendations.
• Prepare audit workpapers and audit reports.
• Facilitate stakeholder workshops.
• Present assessment findings to executive leadership.
• Advise CISOs, CIOs, and compliance teams on NYDFS requirements.
• Assist customers in developing target operating models.
• Support cybersecurity program modernization initiatives.

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.
• Strong verbal and written communication skills.
• Ability to drive follow-ups with business stakeholders and vendor contacts.
• Experience coordinating evidence/artifact collection for audits, attestations, or regulatory requirements.
• Strong organization skills: tracking, repository hygiene, and maintaining audit-ready traceability.
• Ability to validate evidence for completeness and applicability; escalate gaps and drive closure.
• Project management fundamentals including status reporting and issue/risk escalation.
• 5+ years of cybersecurity, risk, or compliance consulting experience.
• Strong understanding of NYDFS Cybersecurity Regulation (23 NYCRR Part 500).
• Experience conducting cybersecurity assessments and regulatory compliance reviews.
• Knowledge of cybersecurity governance and risk management practices.
• Excellent communication and client-facing skills., * NYDFS Compliance Assessments.
• Security Control Assessments.
• 23 NYCRR Part 500.
• Regulatory Readiness.
• IT Audit.
• Risk Management.
• Evidence Tracking.
• Project Management.
• Cybersecurity Governance.

Qualification And Education:

• Bachelor’s degree in a related field.
• 10+ years of professional experience.

Holman is a family-owned, global automotive services organization anchored by our deeply rooted core values and principles that have enabled us to continue Driving What’s Right thr…