NIST Privacy & Cybersecurity Expert (Volunteer)

Mentor A Promise is a New York City–based nonprofit serving children and youth (ages 5–18) experiencing housing instability, grounded in the belief that every child is a Promise—full of potential, dignity, and possibility. We deliver consistent, high-quality programming across mentorship, literacy, social-emotional learning, and creative expression in shelters, schools, and community spaces, creating structured environments where students can grow, be seen, and build lasting skills. Through signature experiences like The Imagination Studio, The Kitchen Table, The Sound Lab, and The Story Space, we nurture academic development, emotional well-being, and creative voice, all within a trauma-informed, culturally responsive, and accessibility-centered framework.

About the Role

We are seeking a NIST Privacy & Cybersecurity Expert to guide the implementation and alignment of MAP’s data systems with recognized frameworks, including the NIST Privacy Framework and NIST Cybersecurity Framework (CSF). This role will help establish structured, scalable systems for:

• Risk identification and mitigation
• Data protection and governance
• Security controls and compliance readiness

The Expert will serve as a strategic advisor, ensuring MAP builds infrastructure that is secure, compliant, and resilient.

Responsibilities

• Framework Implementation & Alignment
  • Guide adoption of the NIST Privacy Framework and NIST Cybersecurity Framework (CSF)
  • Translate framework principles into operational policies and procedures
  • Support integration of privacy-by-design and security-by-design practices
• Risk Assessment & Mitigation
  • Identify cybersecurity and privacy risks across systems and workflows
  • Support development of risk management and mitigation strategies
  • Conduct or advise on security and privacy assessments
• Data Governance & Security Controls
  • Advise on data classification, access controls, and secure data handling
  • Support development of policies for data minimization, retention, and protection
  • Collaborate with IT to strengthen system security and infrastructure
• Compliance & Readiness
  • Align practices with applicable laws and standards (FERPA, NY SHIELD Act, DOE expectations)
  • Support audit readiness and compliance documentation
  • Provide guidance on secure third-party/vendor integrations
• Training & Cross-Team Collaboration
  • Support internal education on cybersecurity and privacy best practices
  • Collaborate with IT, Legal, and Program teams to ensure system-wide alignment
  • Maintain timely, professional responsiveness via Google Workspace

Requirements

• Strong knowledge of the NIST Privacy Framework and/or NIST Cybersecurity Framework (CSF)
• Experience in cybersecurity, privacy, or data governance
• Ability to translate technical frameworks into practical systems and policies
• Strong analytical and problem-solving skills
• Alignment with MAP’s mission and dignity-centered values

Qualifications

• Preferred:
  • Experience in nonprofit, education, or youth-serving environments
  • Familiarity with FERPA, New York SHIELD Act, and DOE compliance requirements
  • Experience conducting risk assessments or implementing security frameworks
  • Background in IT security, compliance, or data protection

Commitment

• Volunteer role
• Approximately 5–10 hours per week
• Minimum 6-month commitment preferred
• Fully remote with optional NYC-based collaboration

Benefits

• Strategic experience implementing industry-standard cybersecurity frameworks
• Opportunity to shape secure systems in a mission-driven organization
• Collaboration with leadership across legal, tech, and program teams
• Professional references and letters of recommendation
• A meaningful role protecting sensitive data and strengthening organizational trust

Volunteer opportunities are limited to individuals based in the United States due to legal, safeguarding, data-privacy, and programmatic requirements.