Cybersecurity Compliance & Technical Controls Consultant - 2-Year Engagement

Key Responsibilites

• Assess and validate the implementation and eUectiveness of cybersecurity controls against applicable regulatory requirements, security frameworks, and Minimum Baseline Security Standards (MBSS), and golden images for servers and endpoints.

• Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets to ensure adherence to security, regulatory, and organizational requirements.

• Review and assess security controls and recommend remediation or improvement actions where necessary.

• Manage compliance evidence collection, documentation, and repositories to support audits, assessments, and regulatory submissions.

• Support internal and external audits, including evidence management, findings remediation, and corrective action tracking.

• Support cybersecurity risk assessments and ensure regulatory and compliance risks are identified, assessed, and appropriately managed.

• Assist in the development and monitoring of compliance-related Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).

• Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders.

• Develop, maintain, and review cybersecurity policies, standards, procedures, and controls to support compliance with MBSS and applicable regulatory requirements.

• Monitor regulatory and MBSS requirement updates and ensure timely assessment and implementation of new compliance obligations.

• Communicate technical and regulatory requirements eUectively to both technical and non-technical stakeholders.

• Conduct technical compliance assessments of firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM implementations.

• Verify compliance with secure configuration baselines and system hardening standards for servers, databases, operating systems, and network devices.

• Evaluate backup, disaster recovery, and business continuity controls to ensure compliance with regulatory, organizational, and MBSS requirements.

• Review application security controls and ensure adherence to Secure Software Development Lifecycle (SSDLC) requirements.

• Analyze vulnerability assessment and penetration testing results to identify compliance gaps and track remediation activities.

If you would like to know more about the Global Consulting Bootcamp Visit:

If you would like to know more about the MC Club Visit:

Originally posted on Himalayas

• Cybersecurity Consultant
• Compliance Consultant
• Security Consultant
• IT Compliance Specialist

Source: Himalayas