Senior Consultant – Cyber Security

Electric Mind

. Translate MRAs, MRIAs, Consent Orders, and NY DFS 500.17 cybersecurity event notifications into prioritized remediation plans with milestones, evidence requirements, and validation criteria .

Posted 10/28/2026full-timeToronto • CanadaSenior💰 $100,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response coordination, vulnerability management, and regulatory compliance across multiple frameworks. Proficient in leading remediation efforts and collaborating with cross-functional teams to achieve security outcomes.

Highest-signal resume keywords

Incident Response CoordinationVulnerability Management Program DesignRegulatory Compliance ExpertiseIdentity Access Management (IAM)Security Tooling Operationalization

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseVulnerability ManagementRisk ScoringPatch ManagementRegulatory CommunicationForensic CoordinationEvidence Package DraftingRemediation PlanningCybersecurity FrameworksSecurity Metrics

Soft Skills

MentoringCollaborationCommunicationLeadership

Tools & Technologies

QualysTenableRapid7 InsightVMMicrosoft Defender for CloudServiceNow Vulnerability ResponseSailPointSaviyntOktaAzure AD / Entra IDCyberArk

Industry Keywords

NIST SP 800-61MITRE ATT&CKGDPRNY DFS Part 500SOX ITGCPCI DSS 4.0GLBA Safeguards RuleSOC 1SOC 2FFIEC

Tech Stack

Tools & technologies

AzureCloudCyber SecurityLinuxServiceNow

About the role

Key responsibilities & impact

Translate MRAs, MRIAs, Consent Orders, and NY DFS 500.17 cybersecurity event notifications into prioritized remediation plans with milestones, evidence requirements, and validation criteria
Prepare clients for FRB, OCC, FDIC, NY DFS, SEC, and FFIEC exams and continuous-monitoring touchpoints
Draft response letters, walkthroughs, evidence packages, and defend the work
Partner with client CISO, IT Risk, Infrastructure, and IAM teams to close findings and achieve engineering outcomes
Lead or co-lead client-side incident response for material events, including containment, forensic coordination, regulator and law-enforcement notification timing, executive and board communications, and post-incident remediation
Assess vulnerability and patch management operations, design risk-based SLAs, build exception governance, and operationalize security tooling
Lead IAM remediation workstreams covering privileged access management, joiner-mover-leaver, recertification, segregation of duties, and identity governance
Mentor analysts and consultants and review deliverables
Contribute to proposals, thought leadership, methodology assets, and follow-on client work

Requirements

What you’ll need

Ability to speak credibly to at least three listed regulatory frameworks and regimes based on practical experience
Hands-on experience leading or coordinating incident response for ransomware, business email compromise, third-party breach, insider, and nation-state events
Working knowledge of NIST SP 800-61 and MITRE ATT&CK
Experience coordinating with legal, privacy, communications, forensics, insurance, and regulators under time pressure
Experience drafting and defending incident notifications and regulator communications under NY DFS Part 500, SEC 8-K Item 1.05, GDPR, and state breach laws
Demonstrated experience designing or remediating enterprise vulnerability management programs
Experience with risk scoring including CVSS, EPSS, and KEV; SLA design; exception governance; and metrics
Operational familiarity with Qualys, Tenable, Rapid7 InsightVM, Wiz, Microsoft Defender for Cloud, and ServiceNow Vulnerability Response
Patch management at scale across Windows, Linux, network, container, and cloud workloads
Strong grasp of IAM domains including IGA, PAM, authentication and federation, joiner-mover-leaver, access certification, and SoD
Working experience with at least two of SailPoint, Saviynt, Okta, Azure AD / Entra ID, Ping, CyberArk, BeyondTrust, and Delinea
Practical experience reducing standing privilege, designing role models, and remediating orphaned accounts, toxic combinations, shared service accounts, and weak recertification
SOX ITGC, PCI DSS 4.0, GLBA Safeguards Rule, and SOC 1/SOC 2 attestation work are nice-to-have

Benefits

Comp & perks

Inclusive employer committed to diversity
Recruitment and selection accommodations available