Compliance Risk Consultants

Ampcus Inc; New York (NY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Ampcus Inc. is seeking a highly motivated candidate to join our team in New York for a 12-month assignment with potential extension.

The role focuses on technology and cyber compliance risk, regulatory mapping, and advisory support across business initiatives. You will perform risk assessments, coordinate remediation, and collaborate with internal and external stakeholders, including reporting to senior management and possibly the Board.

Qualifications

• 2–5 years of experience managing, consulting, or compliance.
• 2–5 years of experience in information security, technology, or risk management.
• 2–5 years of experience developing, evaluating, or implementing cybersecurity, technology or compliance risk assessments.

Responsibilities

• Provide guidance on technology and cyber compliance risk for business initiatives.
• Assess regulatory mapping and control requirements (NIST, PCI DSS, FFIEC guidance).
• Conduct risk assessments for technology and cybersecurity processes.
• Coordinate remediation and ensure repeatable assessment methodologies.
• Identify and escalate compliance issues and advise on remediation.
• Collaborate with stakeholders to report assessments to senior management and boards.

Skills

Compliance experience

Information security

Risk management

Cybersecurity risk assessments

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Location

New York, NYC - Onsite / hybrid

Duration

12-month assignment with the possibility of extension

Key Responsibilities

• Compliance Advisory & Challenge: Provide guidance and effective challenge on the compliance risk of business initiatives. Evaluate the adequacy of systems and procedures supporting the tech and cyber compliance program.
• Regulatory Mapping: Understand and assess the inventory of technology and cyber risk management related laws and regulations, as well as industry standards such as the NIST, PCI DSS, CSF and FFIEC guidance, and how they translate into organizational requirements and controls.
• Regulatory Applicability: Perform technology and cybersecurity risk management requirement applicability and impact assessments against business, technology and cyber processes.
• Risk Assessments: Coordinate and execute compliance assessments for risk taking activities and process breakdowns against these organizational technology and cybersecurity risk management requirements, including any planned remediation; ensuring the team has a documented, rationalized and repeatable assessment methodologies.
• Issue Management: Identify compliance issues requiring investigation or follow-up. Review complaints from various Lines of Business (LOB) and advise on necessary remediation.
• Stakeholder Collaboration: Work with internal and external stakeholders to develop and/or enhance existing compliance assessment reporting, and draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.

Basic Qualifications

• 2-5 years of experience managing, consulting, or compliance
• 2-5 years of experience working in the fields of information security, technology, or risk management
• 2-5 years of experience developing, evaluating, or implementing cybersecurity, technology or compliance risk assessments

Preferred Qualifications

• At least 4 years of experience in a second-line or oversight role at a financial institution or regulatory agency, to include the development and oversight of risk management metric reporting; prior compliance work at Visa, Client or Client
• Knowledge of supervisory expectations expressed in the FFIEC IT Handbook, Client Supervisory Letters, Office of the Comptroller of the Currency Bulletins, or Federal Deposit Insurance Corporation Financial Institution Letters Professional security management certifications, such as a Certified Information Systems Security
• Working knowledge of domestic and international regulatory requirements and laws that govern credit and debit network
• Excellent verbal and written communication skills
• Passion and expertise in cybersecurity, with the ability to be provide credible challenge when necessary
• Ability to manage multiple projects while maintaining superior results
• Ability to work cross-functionally

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.