About the position
We are seeking a highly skilled and experienced Senior Cyber Risk Analyst to join our financial institution's Second Line of Defense team. This critical role involves providing oversight of threat and vulnerability management programs and spearheading the implementation and management of a cutting-edge cyber risk quantification solution. The ideal candidate will have a strong background in cyber risk management, exceptional analytical skills, and a proactive approach to identifying and mitigating cyber threats. The candidate will provide independent assessment and oversight of the cyber risk practices carried out by the first line of defense. The candidate will ensure that cyber risk is managed in accordance with the risk appetite defined by senior management and promote a strong risk culture through the organization.
Responsibilities
- Conduct independent controls testing and vulnerability scans on a regular basis and provide credible challenge to the First Line of Defense on security gaps and weaknesses.
- Collaborate with the First Line of Defense to ensure timely and effective identification and mitigation of vulnerabilities.
- Participate in the implementation of a comprehensive cyber risk quantification solution.
- Continuously monitor and update the cyber risk quantification tool to reflect the evolving threat landscape and organizational changes.
- Identify, develop, and report on key risk indicators (KRIs) to provide insights into the Bank's cyber risk profile.
- Support the development and maintenance of security policies, standards, and procedures.
- Evaluate and recommend cloud security controls and best practices, such as those recommended by NIST CSF and 800-53, CIS, etc.
- Coordinate with internal and external stakeholders to ensure the timely and effective implementation of security controls and remediation actions.
- Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.).
- Adheres to Bank policies and procedures and completes required training.
- Identifies and reports suspicious activity.
Requirements
- Bachelor's Degree in Cybersecurity, Computer Science, or a related field.
- Minimum 4-6 years of experience in cybersecurity, threat and vulnerability management, or related fields.
- Experience with cybersecurity tools and risk quantification methodologies preferred.
Nice-to-haves
- Professional certifications such as CISSP and CRISC are highly desirable.
- Professional certifications such as CCSK, CCSP, or AWS are preferred. Mandatory after 1-1/2 years.
Benefits
- Competitive benefits plan.
- Tuition reimbursement.
- Career coaching, courses and training through GO FOR MORE™ Academy.
- Mentoring opportunities through iCARE™ program.
- Hybrid work environment for many positions.
- Remote work environment for designated positions.
