Cybersecurity Analyst (GRC)
About The Position
The Cybersecurity Analyst (GRC) serves in a security risk, audit, and compliance analyst role within the Cyber Command Audit and Compliance Division. The role helps build and maintain Citywide cybersecurity risk, audit, and compliance programs; continuously improve Cyber Command; participate in Citywide cybersecurity risk assessments; and help assess New York City agencies’ cybersecurity risks and compliance posture. The Analyst supports compliance with Citywide cybersecurity policies, standards, procedures, and frameworks. Cyber Command protects City systems against cyber threats and provides support to more than 100 agencies and offices. The position is based in Brooklyn, New York. The stated shift is day, though the candidate may be required to work various shifts, including weekends and nights or evenings, because the role supports a 24/7 operation.
Requirements
- A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the position, or equivalent education and/or experience.
- The position may require work on various shifts, including weekends and nights or evenings, due to its duties in a 24/7 operation.
Responsibilities
- Review security assessment and service performance reports, identify significant issues or variances, and initiate corrective actions when necessary.
- Review and analyze cybersecurity risk cases, including agency-submitted justification and exception documents.
- Assist in developing cybersecurity risk and compliance assessment procedures and testing methodologies based on established frameworks and guidelines.
- Assess NYC agencies’ documented information security and technology policies, procedures, and practices.
- Evaluate cybersecurity programs or their components for compliance with Citywide cybersecurity policies and standards.
- Conduct risk-based cybersecurity audits of agency programs, projects, and initiatives, including evaluating the design and operating effectiveness of security controls.
- Execute audit procedures, perform technical and procedural control testing, evaluate supporting evidence, and document results according to established audit methodologies.
- Draft and present findings reports, working papers, concise control assessments, and narrative and table-based systems testing reports.
- Prepare and maintain audit working papers supporting observations, findings, conclusions, and recommendations, and communicate audit results clearly to stakeholders.
- Track and validate remediation of audit findings, cybersecurity control deficiencies, and compliance gaps.
- Analyze legal, regulatory, contractual, and policy requirements relevant to cybersecurity controls and compliance, and support documentation of compliance gaps and recommendations.
- Communicate with NYC agencies to assist them in complying with Citywide policies and standards.
- Handle special projects and initiatives as assigned.
Benefits
- The employer states that it offers great benefits, but does not specify them.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
