Cyber Risk Analyst
Core
Shape Cyber Command's approach to risk management, build risk frameworks, and assess/monitor NYC agencies' cybersecurity risks.
Role type
Cyber Risk Analyst (Risk Management & Policy)
Builds
Risk frameworks, risk assessment procedures, control testing methodologies, and a cyber risk registry.
Domain
Public sector cybersecurity / Government risk management
Deliverable
dashboards & analysis
Required skills
Risk management, cybersecurity risk assessment, policy review, project management, stakeholder engagement, data integration, control testing, report presentation
Preferred skills
N/A
Technologies
N/A
Responsibilities
Build new risk processes and implement risk frameworks; Manage projects; Work with stakeholders across divisions; Review and analyze cybersecurity risk cases and exceptions; Assist in developing cybersecurity risk assessment procedures and control testing methodologies; Assess agencies' information security policies and practices; Present risk findings to senior leadership; Engage in communications with agencies to assist in risk management; Manage and administer the cyber risk registry; Build data integrations to improve visibility into the risk environment.
Seniority
Mid-level, hands-on IC