Cybersecurity Analyst (GRC)
Core
Build and maintain effective Citywide Cybersecurity risk, audit, and compliance programs for NYC agencies.
Role type
Cyber Governance, Risk, and Compliance Analyst
Builds
Citywide cybersecurity risk assessments, compliance programs, and audit procedures
Domain
Public sector cybersecurity / Government compliance
Deliverable
dashboards & analysis
Required skills
Risk assessment, audit execution, compliance analysis, policy evaluation, control testing, report drafting, remediation tracking, regulatory analysis
Preferred skills
Framework knowledge, stakeholder engagement, special project management
Responsibilities
Review security assessment reports and initiate corrective actions; Analyze cybersecurity risk cases and exceptions; Develop risk assessment procedures and testing methodologies; Evaluate agency security policies and practices; Conduct risk-based cybersecurity audits; Execute audit procedures and control testing; Draft and present finding reports; Maintain audit working papers; Track remediation of compliance gaps; Analyze legal and regulatory requirements; Engage with agencies to ensure policy compliance.
Seniority
Mid-level, hands-on analyst
