Senior Associate - Risk Management

Job Requisition ID: 93817 Location Designation: Fully Onsite Location: 44 South Broadway, White Plains, New York 10601 Salary Range: $114,400.00 - $167,300.00/year Duties Conduct cybersecurity risk assessments and control effectiveness assessments over critical applications, infrastructure, and enterprise processes. Perform compliance validations against these controls derived from applicable regulations (NYDFS, SOX, MAR) and ensure proper implementation of these security controls through evidence analysis. Design AI Governance model for securing AI assets of New York Life. Utilize understanding of AI cybersecurity risk and control frameworks to develop governance model including inventorying, risk and control assessments, and reporting. Create knowledge management AI model that consumes company risk and control data and learns from that to answer queries in natural language. Develop a model capable of answering in depth questions that typical audience groups (Executives, Asset Owners, Tech/Risk Teams) may ask. Create protected and controlled landscape for information exchanges. Streamline and automate cybersecurity residual risk and control effectiveness reporting by designing risk measurement methodologies/processes across various cyber domains and develop automated tableau-based dashboards to publish this information. Apply knowledge of AWS and DBMS to implement the underlying AWS database and connections to Tableau. Education & Experience Requirements Master's degree in Cybersecurity, Computer Science, or related field (willing to accept foreign education equivalent) plus four (4) years of experience as a Senior Associate – Risk Management or related occupation conducting cybersecurity assessments, compliance management, reporting, and developing and automating security testing processes. Alternatively, a Bachelor’s degree in Cybersecurity, Computer Science or related field (willing to accept foreign education equivalent) plus 6 years of experience as a Senior Associate - Risk Management or related occupation conducting cybersecurity assessments, compliance management, reporting, and developing and automating security testing processes. Specific Skills / Other Requirements Applying risk and control domain knowledge for Identity and Access Management (IAM), Vulnerability Management (VM), Logging and Monitoring (L&M), data protection, and cyber operations to develop risk measurement methodologies. Automating control implementation and managing effectiveness through assessments to ensure compliance and risk mitigation. Implementing onboarding/termination controls, privileged access controls, and role-based access controls. Designing and evaluating secure architectures for complex IT environments, focusing on hybrid infrastructures that integrate on-premises and cloud-based solutions. Utilizing industry standards and frameworks, including the NIST Cybersecurity Framework, ISO 27001, and NIST SP 800-37 & 800-53, to guide security governance and risk assessments. Utilizing advanced Microsoft Excel functionalities including macros, VLOOKUPs, pivot tables, and data visualization techniques for analytics and reporting. Our Benefits We provide a full package of benefits for employees – including leave programs, adoption assistance, and student loan repayment programs. #J-18808-Ljbffr New York Life