Compliance Risk Consultants

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

New York, NYC - Onsite / hybrid

12-month assignment with the possibility of extension

• Compliance Advisory & Challenge: Provide guidance and effective challenge on the compliance risk of business initiatives. Evaluate the adequacy of systems and procedures supporting the tech and cyber compliance program.
• Regulatory Mapping: Understand and assess the inventory of technology and cyber risk management related laws and regulations, as well as industry standards such as the NIST, PCI DSS, CSF and FFIEC guidance, and how they translate into organizational requirements and controls.
• Regulatory Applicability: Perform technology and cybersecurity risk management requirement applicability and impact assessments against business, technology and cyber processes.
• Risk Assessments: Coordinate and execute compliance assessments for risk taking activities and process breakdowns against these organizational technology and cybersecurity risk management requirements, including any planned remediation; ensuring the team has a documented, rationalized and repeatable assessment methodologies.
• Issue Management: Identify compliance issues requiring investigation or follow-up. Review complaints from various Lines of Business (LOB) and advise on necessary remediation.
• Stakeholder Collaboration: Work with internal and external stakeholders to develop and/or enhance existing compliance assessment reporting, and draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.

• 2-5 years of experience managing, consulting, or compliance
• 2-5 years of experience working in the fields of information security, technology, or risk management
• 2-5 years of experience developing, evaluating, or implementing cybersecurity, technology or compliance risk assessments

• At least 4 years of experience in a second-line or oversight role at a financial institution or regulatory agency, to include the development and oversight of risk management metric reporting; prior compliance work at Visa, Client or Client
• Knowledge of supervisory expectations expressed in the FFIEC IT Handbook, Client Supervisory Letters, Office of the Comptroller of the Currency Bulletins, or Federal Deposit Insurance Corporation Financial Institution Letters Professional security management certifications, such as a Certified Information Systems Security
• Working knowledge of domestic and international regulatory requirements and laws that govern credit and debit network
• Excellent verbal and written communication skills
• Passion and expertise in cybersecurity, with the ability to be provide credible challenge when necessary
• Ability to manage multiple projects while maintaining superior results
• Ability to work cross-functionally