GRC Consultant

Part-Time GRC Consultant – PCI Compliance & MFA Remediation

Location: New York City, NY (On-site)

Engagement: Part-Time Contract

Hours: Approximately 20 hours per week

Duration: Through December 2026

Hourly Rate: $75/hour

Start Date: Immediate

About the Opportunity

VerTalents is assisting a client in identifying an experienced Governance, Risk, and Compliance (GRC) Consultant to support ongoing PCI DSS compliance initiatives and Multi-Factor Authentication (MFA) remediation efforts related to New York Department of Financial Services (NYDFS) regulatory requirements.

This is a part-time consulting engagement requiring a hands-on professional with a strong background in cybersecurity governance, IT risk, security control auditing, and regulatory compliance. The consultant will work closely with internal stakeholders to assess existing controls, identify gaps, coordinate remediation activities, and strengthen the organization's compliance posture.

Key Responsibilities

\n
• Support PCI DSS compliance initiatives, including control assessments, evidence collection, and audit readiness.
\n
• Review and assess MFA governance, implementation, and technical security controls.
\n
• Evaluate existing security controls and identify gaps related to NYDFS requirements.
\n
• Coordinate MFA remediation activities and track progress through completion.
\n
• Conduct control reviews, document findings, and support remediation planning.
\n
• Work with IT, Information Security, Compliance, and business stakeholders to ensure alignment on security requirements.
\n
• Maintain clear documentation, evidence, and status reporting.
\n
• Support project coordination and ensure remediation milestones are met within established timelines.
\n

Required Qualifications

\n
• Proven experience in Governance, Risk, and Compliance (GRC), IT Audit, or Cybersecurity Risk Management.
\n
• Hands-on experience with PCI DSS compliance and assessments.
\n
• Experience with MFA governance, technical control auditing, or Identity and Access Management (IAM).
\n
• Understanding of NYDFS cybersecurity regulatory requirements, preferably NYDFS 500.
\n
• Experience with security control assessments, audit evidence collection, gap analysis, and remediation tracking.
\n
• Strong project management, organizational, and stakeholder communication skills.
\n
• Ability to work independently and manage multiple priorities.
\n

Engagement Details

\n
• Part-time commitment of approximately 20 hours per week.
\n
• On-site work in New York City is required.
\n
• Contract engagement expected to continue through December 2026.
\n
• Hourly compensation: $75.
\n
• Immediate availability is strongly preferred.
\n