Cyber Risk Analyst

City of New York•New York City, NY

2d•Onsite

About The Position

The Cyber Risk Analyst will serve in the Cyber Command Risk Program under the direction of the Senior Advisor. The role helps shape Cyber Command’s risk-management approach, build risk frameworks and processes, and assess and monitor cybersecurity risks across New York City agencies. The analyst will support risk evaluations, agency engagement, risk-registry administration, and data integrations that improve visibility into the City’s risk environment.

Requirements

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position, or equivalent education and/or experience.

Responsibilities

Build risk processes and implement risk frameworks to improve monitoring and evaluation of risks across the City.
Manage projects, navigating ambiguity and challenges.
Work with stakeholders across divisions, soliciting input and incorporating feedback.
Review and analyze cybersecurity risk cases, justifications, and exception documents submitted by agencies.
Help develop cybersecurity risk-assessment procedures and control-testing methodologies based on established frameworks and guidelines.
Assess NYC agencies’ documented information security and technology policies, procedures, and practices.
Present risk findings to senior leadership.
Communicate with NYC agencies to help them manage risk successfully.
Manage and administer the cyber risk registry.
Build data integrations to improve visibility into the City’s risk environment.
Handle special projects and initiatives as assigned.