Our team helps organizations cut through complexity—aligning business ambition with technology execution to unlock real, lasting change.You’llwork alongside curious, driven people tackling high-impact challenges for everyone from scaling startups to global enterprises.

Electric

Mind’s Technology Practice brings together deep engineeringexpertise, modern delivery disciplines, and pragmatic architectural thinking to help clients execute complex, mission-critical transformation. We design and implement scalable, secure, high-impact technology solutions that accelerate business outcomes. S. banks, broker-dealers, and insurers on the most consequential cyber security problems they face — the ones that show up in MRAs, MRIAs, Consent Orders.

As a Senior Consultant on our Cyber & Regulatory Remediation team, you will lead client-facing workstreams that translate regulator findings into defensible, executable remediation plans, and then drive those plans to closure alongside CISO, Risk, and Audit leadership.

You will own the substance: writing remediation roadmaps that an OCC, FRB, or NY DFS examiner will accept, hardening the controls that fail under exam, and personally pushing technical workstreams — incident response, vulnerability and patch management, and identity — across the finish line. Lead regulatory remediation programs. Translate MRAs, MRIAs, Matters Requiring Attention, Consent Orders, and 500.17 (NY DFS)cybersecurity event notifications into prioritized remediation plans with defensible milestones, evidence requirements, and validation criteria.

Prepare clients for FRB, OCC, FDIC, NY DFS, SEC, and FFIEC exams and continuous-monitoring touchpoints. Draft response letters, walkthroughs, and evidence packages.



Drive technical remediation, not just documentation.

Partner with client CISO, IT Risk, Infrastructure, and IAM teams to actually close findings — not just status-report them. Lead or co-lead client-side IR for material events: containment strategy, forensic coordination, regulator and law-enforcement notification timing, executive and board communications, and post-incident remediation. Assess current-state VM/patch operations, design risk-based SLAs, build exception governance, and operationalize tooling (Qualys, Tenable, Rapid7, Wiz, ServiceNow VR) so remediation actually happens at SLA.

Contribute to proposals, thought leadership, and methodology assets.

Required Regulatory

ExpertiseYou should be able to walk into a client room and speak credibly to at least three of the following frameworks and regimes — not from a study guide, but from having done the work: Federal Reserve Board (FRB) / SR 11-7 model risk, SR 20-24 and SR 21-14cyberand operational resilience guidance, MRAs and MRIAs. CISO reporting to the Board, governance, 72-hour incident notification, ransomware payment notification, asset inventory, MFA, encryption, and Class A company requirements. FFIECCybersecurity Assessment Tool, IT Examination Handbook (Information Security, Business Continuity, Operations).

CIS Controls.

Required





Technical & Operational Expertise CyberIncident Management Comfort coordinating across legal, privacy, communications, forensics (Mandiant, CrowdStrike, Kroll, Unit 42), insurance, and regulators under time pressure.

Experience drafting and defending incident notifications and regulator communications under NY DFS Part 500, SEC 8-K Item 1.05, GDPR, and state breach laws. Demonstrated experience designing or remediating enterprise VM programs: scanning coverage, risk scoring (CVSS, EPSS, KEV), SLA design, exception governance, and metrics. Sc), Rapid7 InsightVM, Wiz, Microsoft Defender for Cloud, and ServiceNow Vulnerability Response.

Patch management at scale across Windows, Linux, network, container, and cloud workloads — including the political work of getting business units to actually patch.

Working experience with at least two of: Practical experience reducing standing privilege, designing role models, and remediating common findings (orphaned accounts, toxic combinations, shared service accounts, weak recertification). $About Electric MindElectric Mind is a fast-growing, AI-native advisory and digital engineering firm built for those who want to shape the future, not just watch it happen.We pride ourselves on a high-touch delivery model and a culture that values diverse talent, innovation, and true client partnership — creating an setting where your ideas matter and your impact is visible. Ifyou’relooking for a place where you can grow fast, collaborate with exceptional teammates, and help build a company scaling its capabilities and global footprint at speed — Electric Mind is the place to ignite your career.

Electric

Mind is committed to diversity in the workplace.

📌 Senior Consultant - Cyber Security (Winnipeg)
🏢 Electric Mind
📍 Winnipeg