IT & Cybersecurity Regulatory Response Consultant III

The IT & Cybersecurity Regulatory Response Consultant III supports the organization's response to cybersecurity regulatory examinations, investigations, and certification activities. As a second-line risk and compliance role, this position partners closely with first-line technology teams and third-line auditors to interpret regulatory requirements and support regulatory readiness across the organization. Success in this role requires strong communication, stakeholder management, and problem-solving skills.

• Coordinate activities that support annual cybersecurity certifications and compliance with regulatory requirements, such as New York DFS Part 500, Wisconsin Insurance Data Security Law, Model Audit Rule, and the SWIFT Customer Security Programme.
• Lead and coordinate responses to regulatory examinations and information requests from agencies such as the OCC, FINRA, SEC, and WI-OCI.
• Support the continued development of NM's California Consumer Privacy Act Article 9 program and its transition into sustainable ongoing operations.
• Articulate technical regulatory interpretations and build stakeholder consensus on topics such as scope determination, control coverage, remediation strategies, and risk conclusions.
• Drive the integration of cybersecurity regulatory requirements into an automated continuous controls monitoring program leveraging a unified data platform and Service Now.
• Build relationships with and provide regulatory and compliance guidance to first-line technology teams responsible for applications and infrastructure.

• Bachelor’s degree in MIS, Accounting, Business, or a related field, or equivalent relevant experience.
• 4+ years of experience in information systems, systems audit, IT controls, or a related technology risk and compliance discipline.
• Experience building or enhancing regulatory compliance programs; financial services industry experience is a plus.
• Excellent relationship management, influence, communication, negotiation, and professional judgment skills.
• Proven ability to independently identify and resolve critical and complex issues through effective problem-solving skills.
• Ability to operate effectively in ambiguous situations and bring structure to complex work.

• Compliance:
  Applies knowledge of the organization's standards, policies, processes, and procedures to ensure that regulatory requirements are met and compliance is maintained.
• Cross Functional Partnering & Planning:
  Facilitates collaboration, communication, coordination, and planning with individuals and teams from different functions within the organization, and who have different areas of expertise, to achieve common goals.
• Process Improvement:
  Assesses the current processes and impact to analyze, design, and manage potential improvement areas for more efficient, effective workflow.
• Engineering Expertise & Practices:
  Applies specialized experiences in different facets of engineering, including data, applications, cyber, systems, operations, product, security, and testing, along with technical aptitude to adapt new expertise as they become relevant through an understanding of underlying engineering principles.
• Analytical Thinking:
  Organizes and compares various aspects of a situation to comprehend and identify key or underlying complex issues through the use of quantitative data and analysis; leverages strong business acumen, problem solving, and interpersonal skills to think critically about situations from multiple perspectives and consistently seeks ways to improve processes.
• Risk Optimization:
  Aligns residual risk to risk tolerance while considering internal and external factors as well as cost/benefits of available options.

• Pay…