Cybersecurity Analyst (GRC)
About The Position
The Cybersecurity Analyst (GRC) serves in a security risk, audit, and compliance analyst role within the Cyber Command Audit and Compliance Division of New York City’s Office of Technology and Innovation. The role helps build and maintain Citywide cybersecurity risk, audit, and compliance programs, continuously improve Cyber Command, and participate in Citywide cybersecurity risk assessments. The Analyst assesses NYC agencies’ cybersecurity risks and compliance posture and helps ensure compliance with Citywide cybersecurity policies, standards, procedures, and frameworks. The position supports Cyber Command, which protects City systems against cyber threats and provides cybersecurity support to more than 100 agencies and offices. The work location is Brooklyn, NY. The stated shift is day, although the candidate may be required to work various shifts, including weekends and nights/evenings, because the position supports a 24/7 operation.
Requirements
- A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position, or equivalent education and/or experience.
Responsibilities
- Review security assessment and service performance reports to identify significant issues or variances and initiate corrective actions where necessary.
- Review and analyze cybersecurity risk cases, including agency-submitted justifications and exception documents.
- Assist in developing cybersecurity risk and compliance assessment procedures and testing methodologies based on established frameworks and guidelines.
- Assess NYC agencies’ documented information security and technology policies, procedures, and practices.
- Evaluate cybersecurity programs or components for compliance with Citywide cybersecurity policies and standards.
- Conduct risk-based cybersecurity audits of NYC agencies’ programs, projects, and initiatives, including evaluating the design and operating effectiveness of security controls.
- Execute audit procedures, perform technical and procedural control testing, evaluate supporting evidence, and document results in accordance with established audit methodologies.
- Draft and present findings reports, working papers, concise control assessments, and narrative and table-based systems testing reports.
- Prepare and maintain audit working papers supporting observations, findings, conclusions, and recommendations, and communicate audit results clearly to stakeholders.
- Track and validate remediation of audit findings, cybersecurity control deficiencies, and compliance gaps.
- Analyze legal, regulatory, contractual, and policy requirements relevant to cybersecurity controls and compliance, and support documentation of gaps and recommendations.
- Communicate with NYC agencies to assist them in complying with Citywide policies and standards.
- Handle special projects and initiatives as assigned.
Benefits
- The posting states that OTI offers great benefits, without specifying them.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
