Cybersecurity Compliance & Technical Controls Consultant - 2-Year Engagement

Responsibilities

• We are seeking a Cybersecurity Compliance & Technical Controls Consultant to assess whether cybersecurity controls are implemented effectively and meet applicable regulatory requirements, security frameworks, Minimum Baseline Security Standards (MBSS), and approved configuration baselines. The consultant will conduct technical compliance reviews across infrastructure, cloud, applications, and critical assets; manage audit evidence and remediation tracking; and develop policies, reports, and metrics that support ongoing compliance.
• Ability to assess the implementation and effectiveness of security controls, document gaps, and recommend remediation.
• Familiarity with application security and Secure Software Development Lifecycle (SSDLC) requirements.
• Experience managing compliance evidence, audit support, findings, and corrective action tracking.
• Ability to develop or maintain cybersecurity policies, standards, procedures, dashboards, KPIs, and KRIs.
• Assess and validate the implementation and eUectiveness of cybersecurity controls against applicable regulatory requirements, security frameworks, and Minimum Baseline Security Standards (MBSS), and golden images for servers and endpoints.
• Manage compliance evidence collection, documentation, and repositories to support audits, assessments, and regulatory submissions.
• Support internal and external audits, including evidence management, findings remediation, and corrective action tracking.
• Support cybersecurity risk assessments and ensure regulatory and compliance risks are identified, assessed, and appropriately managed.
• Assist in the development and monitoring of compliance-related Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).

Languages