Cyber Security Risk Analyst

Company Federal Reserve Bank of New York When you work at the New York Fed, you have the opportunity to make an impact in our communities and across the nation. Our mission-driven, curious, and dedicated colleagues apply their diverse perspectives and unique talents to support the strength of the U.S. economy and stability of the global financial system. At the Bank, we work full-time onsite with our teams. We believe being physically together allows us to draw on our collective strengths, while recognizing that the ability to work flexibly from time to time remains important to achieving our mission. Information Security New York (ISNY) ISNY is responsible for developing, executing, and maintaining a superior information security program that promotes resiliency by identifying and mitigating cyber risks and threats through risk-based consultation, advice, and direction for controls, designs, and investments for the entire Bank. Cyber Security Assurance Department (CSA) The CSA is responsible for assessing risks associated with third‑party vendor systems, software, IoT devices, industrial control systems, technology processes, or outsourcing arrangements handling, processing, or storing Federal Reserve data. The team works directly with the business, providing guidance and managing risks. The department is also responsible for integrating security practices into DevSecOps methodology, performing application security testing, and working on security tooling integration as part of the CI/CD pipeline. Engagement and guidance to product development teams are implemented through CSA analysts being embedded in squads to provide security advice during development and by managing the Security Champion Program in the Bank. How you’ll make an impact as a Cyber Security Assurance Analyst You will work in a dynamic team environment and play an important role in helping the Federal Reserve carry out its responsibilities. The Cyber Security Risk Analyst will be responsible for risk assessments, cloud mitigations, security application testing, threat modeling, security design review, and overall information systems risk management. The role is an individual contributor who will work closely with technology squads to flawlessly deliver technological projects to the business customers. The candidate will perform risk assessments that include application security testing focusing on cloud migration workloads with specific focus on the mission‑critical systems supporting Markets operations. The position resides in the Information Security Function and reports to the Cyber Security Assurance Manager. Role’s objectives are: Perform cloud application security risk assessments. Execute assessments timely and accurately. Manage relationship with the assigned business unit. Embed within the development squad to provide timely security advice. Perform application security testing ensuring only compliant workloads move to the cloud. Support development squads in implementing security tooling in the CI/CD pipeline. The unique skill sets we’re looking for: Experience in executing assessments in the cloud and against third‑party SaaS solutions. Expert knowledge of performing risk management based on NIST 800‑53. Experience in determining vulnerability risk impact on key objectives and critical processes; ability to link risk management programs to inform critical business strategies. Experience thriving in the DevSecOps culture and working closely with developers in an agile, quick‑release environment. Demonstrated leadership experience, managing projects, strong decision‑making and execution abilities. Strong experience managing and timely resolving security findings in agile practice. Expert level application security testing skills supporting CI/CD pipeline. Experience evaluating third‑party vendors supporting bank processes with focus on data protection. Proven ability evaluating and securing Gen AI systems with internal and embedded models. Possession of or ability to obtain and maintain national security clearance, which includes U.S. citizenship when required. Salary Range $170,000k‑$230,000k Other Things to Know We believe in transparency at the New York Fed. This salary range reflects a variety of skills and experiences candidates may bring to the job. We pay individuals along this range based on their unique backgrounds. Whether you’re stretching into the job or are a more seasoned candidate, we aim to pay competitively for your contributions. This position requires possession of or the ability to obtain and maintain national security clearance, which requires U.S. citizenship. Candidates must undergo an enhanced background check and will be tested for all controlled substances prohibited by federal law, including marijuana. How we’ll support you Learning & Growing: Educational assistance, career development tools, and stretch opportunities Supporting Your Family: Parental leave, adoption assistance, backup dependent and elder care, college planning resources, and more Managing Your Health: Comprehensive insurance plans, leave policies, onsite Health & Wellness Center, and onsite Fitness Center Optimizing Your Finances: Pension plan, 401(k) with generous match, financial planning resources, and subsidized public transportation program Our culture is deeply grounded in our Touchstone Behaviors By working with us, you’ll have the opportunity to develop and demonstrate your ability to communicate authentically, collaborate inclusively, drive progress, develop others, and take ownership. These competencies shape our culture here at the Bank. They also provide a shared language for how we work together and achieve success and set clear expectations for leading with impact at every stage of your career. Apply now if you’re ready to join us in strengthening the U.S. economy together. Equal Employment Opportunity The New York Fed expects its employees to perform their duties with honesty, integrity, and impartiality, and without improper preferential treatment of any person. Accessibility We value accessibility for all candidates and are happy to provide an accommodation or assistance. Please email us at View email address on click.appcast.io and we’ll be glad to help. Disclaimer This is not necessarily an exhaustive list of all responsibilities, duties, performance standards or requirements, efforts, skills or working conditions associated with the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed when circumstances change. Job Details Full time, Regular, Exempt, Information Technology Family Group, First (United States of America) EEO Statement The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences. #J-18808-Ljbffr Dormont Manufacturing Company