Cybersecurity Compliance Consultant

About the role

Job Overview A Cybersecurity Compliance Consultant, internally titled as a Virtual Compliance Manager, performs point-in-time Gap Analysis & advises clients on an ongoing basis to improve or maintain their adherence to regulatory compliance requirements. This involves continuously monitoring state & federal regulations & working with clients to proactively modify their compliance programs to accommodate new regulatory requirements as they take effect. Compliance program modification entails Compliance Consultant coordination with client stakeholders to design & analyze the impact of changes & modify compliance plans in a timely manner. The Cybersecurity Compliance Consultant is not a remote position. This role is required to be on-site at the DOT Security- Security Operations Center.

Responsibilities

• Act as point of contact for client resources in relation to reported compliance violations
• Advise clients on appropriate use of compliance reporting tools and related technology
• Aid external auditors & authorities with client compliance reviews & investigations
• Assist with client business associate contract maintenance & respond if problems arise
• Develop a vision & roadmap for client compliance controls, processes, & risks
• Facilitate allocation of appropriate resources for effective compliance policy implementation
• Perform periodic gap analysis & ongoing compliance monitoring for client organizations
• Remain up-to-date on compliance laws, rules, & regulations & inform clients about changes
• Support the development & implementation of written compliance policies & procedures
• Track client compliance documents & support the filing of compliance reports as needed
• Act with a sense of urgency, identify alternatives, & set realistic timeframes for resolution
• Complete work based on priority, follow through as promised, & set expectations
• Contribute to & perform both new & pre-existing plans, instructions, & procedures
• Demonstrate active listening & critical thinking skills & comprehend received information
• Interpret & understand complex & evolving concepts in a dynamic, fast-paced environment
• Maintain awareness of technology advancements & their cybersecurity implications
• Understand & present technical concepts to non-technical audiences