Principal Consultant - Cybersecurity Technical Project Manager

$121,355 - $167,000/Yr

NYSTEC - New York, NY

Full-time - Senior

New York, NY

About the position

As a Principal Consultant - Cybersecurity Technical Project Manager at NYSTEC, you will play a crucial role in supporting clients with their cybersecurity compliance and project management needs. This position involves collaborating with team members to conceptualize, deliver, and support clients in navigating the complex cybersecurity landscape. You will be responsible for managing projects related to the design and implementation of security controls, ensuring compliance with regulatory requirements, and maintaining system security plans.

Responsibilities

• Organizational cybersecurity compliance.
• Update and/or develop new security policies, standards, procedures, checklists, technical reports, and guidelines to meet regulatory requirements.
• Develop and maintain system security plans.
• Maintain a plan of actions and milestones (POA&M).
• Assist the agency's chief information security officer (CISO) and the security team with day-to-day management of security activities.
• Manage projects related to the design and implementation of security controls, tools, and integrations.
• Manage vendors in their execution of statements of work and hold them accountable.
• Perform project planning and execution, change management, and cross-functional team management in a matrixed environment.
• Coordinate responses to audits.

Requirements

• Experience writing and/or updating cybersecurity policies and procedures.
• Experience updating system security plans.
• Experience with cybersecurity project management.
• Knowledge of and experience with the implementation of National Institute of Standards and Technology (NIST) 800-53 controls.
• Knowledge of and experience with the NIST Cyber Security Framework (NIST CSF).
• Knowledge of and experience with the NIST Risk Management Framework (NIST RMF).
• Knowledge of and experience with the Health Insurance Portability and Accountability Act (HIPAA) Security and Privacy Rule.
• Eight years of experience in cybersecurity and compliance.
• Two years of experience in project management.
• A bachelor's degree in a related field of study.

Nice-to-haves

• Information systems security certification (e.g., certified information systems security professional [CISSP], certified information systems auditor [CISA], certified information security manager [CISM]).
• Project management certification (e.g., project management professional [PMP]).

Benefits

• Competitive salary range of $121,355 to $167,000 per year.
• Support for personal and professional growth through various benefits and perks.