Cyber Risk Analyst, Office of Chief Information Officer
Job Description
Cyber Risk Analyst, Office of Chief Information Officer City of New York The official website of the City of New York. Find information about important alerts, 311 services, news, programs, events, government employment, the office of the Mayor and elected officials. OPEN TO PERMANENT COMPUTER SYSTEMS MANAGER The Division of Information Technology's mission and vision is to promote and protect the health of all New Yorkers through the use of innovative technology and health information that is useful and available. Duties Duties will include but not be limited to: Collaborate with cross-functional teams to identify and assess cybersecurity risks associated with digital operations, applications, cloud solutions, firewalls, IoT devices, software, custom development, and technology acquisitions. Fulfill risk assessment tickets in a timely manner, ensuring accurate documentation and meeting go-live conditions. Stay abreast of the latest security, privacy, and regulatory concerns, ensuring a proactive approach to third-party risk management. Advise the organization on security and privacy provisions within agreements or contracts, responding to changes requested by third parties to ensure compliance and data protection. Develop and implement efficient processes for risk acceptances, balancing business needs with cybersecurity requirements for various technology domains. Lead initiatives to enhance the efficiency and effectiveness of risk assessment processes. Regularly assess the methodology and tools used for risk assessment, identifying areas for improvement to ensure continuous alignment with industry best practices. Implement improvements in risk assessment workflows, ensuring they remain adaptive to emerging cybersecurity threats for all technology domains. Proactively monitor and analyze the latest cybersecurity threats, vulnerabilities, and attack vectors. Stay current with industry best practices, emerging technologies, and evolving regulatory requirements to ensure our cybersecurity measures remain at the forefront of the field. Engage in continuous learning through participation in industry conferences, workshops, and professional development opportunities to expand your knowledge base. Collaborate with IT project management and operational teams to conduct thorough security analyses encompassing a diverse range of technologies. Preferred Skills In addition to the foundational skills mentioned earlier, an experienced candidate should also possess: Demonstrated experience in leading cybersecurity initiatives and driving risk-based decision-making across diverse technology domains. Proven ability to assess and communicate complex cybersecurity concepts to stakeholders at all levels of the organization. Extensive knowledge of security controls, frameworks, and industry standards, with a focus on continuous improvement. Desired Skills Bachelor's degree in information technology or Computer Science. Industry-recognized certifications within information security and privacy domains (e.g., CISSP, GIAC, CISM, CISA, CIPP, CTPRP, CCSP, etc.). 5+ years of experience in an IT computer-related field. 3+ years of experience with Cybersecurity efforts and emerging technology aligned with the Risk. Why You Should Work for Us Loan Forgiveness: As a prospective employee of the City of New York, you may be eligible for federal/state loan forgiveness and repayment assistance programs that lessen your payments or even fully forgive your full balance. Benefits: City employees are entitled to unmatched benefits such as a premium-free health insurance plan, additional health, fitness, and financial benefits, a public sector defined benefit pension plan, a tax-deferred savings program, and a robust Worksite Wellness Program. Work From Home Policy: Depending on your position, you may be able to work up to two days during the week from home. Job Security: Enjoy more job security compared to private sector employment and contribute to making NYC a healthy place to live and work. Qualifications A master's degree in computer science from an accredited college or university and three (3) years of progressively more responsible, full-time, satisfactory experience in Information Technology (IT) including applications development, systems development, data communications and networking, database administration, data processing, or user services. At least eighteen (18) months of this experience must have been in an administrative, managerial or executive capacity in the areas of applications development, systems development, data communications and networking, database administration, data processing or in the supervision of staff performing these duties. A baccalaureate degree from an accredited college or university and four (4) years of progressively more responsible, full-time, satisfactory experience as described in #J-18808-Ljbffr