Cyber Risk Analyst
CITY OF NEW YORK INC
Company Description Job Description The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the City delivers for New Yorkers in the 21st century. Follow us on social media @NYCOfficeofTech, and visit to learn more.
At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.
About Cyber Command
Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats.
About This Role
The Cyber Risk Analyst will serve in the Cyber Command Risk Program under the direction of the Senior Advisor. They will help shape Cyber Command's approach to risk management, build new risk frameworks and processes, and assess and monitor NYC agencies' cybersecurity risks.
Responsibilities will include:
Build new risk processes and implement risk frameworks to enable better monitoring and evaluation of risks across the City;
Manage projects, pushing through ambiguity and challenges which may arise;
Work with stakeholders across various divisions, soliciting input and working through feedback;
Review and analyze various cybersecurity risk cases, justifications, and exceptions documents submitted by agencies;
Assist in developing cybersecurity risk assessment procedures and control testing methodologies based on established frameworks and guidelines;
Assess NYC agencies' documented information security and technology policies, procedures, and practices;
Present risk findings to senior leadership;
Engage in communications with NYC agencies to assist them in successfully managing risk;
Manage and administer the cyber risk registry;
Build data integrations to improve visibility into the City's risk environment; and
Handle special projects and initiatives as assigned. HOURS/SHIFT
Day - Due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings. WORK LOCATION
Brooklyn, NY TO APPLY
* Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration Please go to and search for Job ID #791068 SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW
APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL OTI participates in E-Verify IT SECURITY SPECIALIST - 95622 Qualifications A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or, Education and/or experience which is equivalent to "1" above. Additional Information The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.
About Cyber Command
Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats.
About This Role
The Cyber Risk Analyst will serve in the Cyber Command Risk Program under the direction of the Senior Advisor. They will help shape Cyber Command's approach to risk management, build new risk frameworks and processes, and assess and monitor NYC agencies' cybersecurity risks.
Responsibilities will include:
Build new risk processes and implement risk frameworks to enable better monitoring and evaluation of risks across the City;
Manage projects, pushing through ambiguity and challenges which may arise;
Work with stakeholders across various divisions, soliciting input and working through feedback;
Review and analyze various cybersecurity risk cases, justifications, and exceptions documents submitted by agencies;
Assist in developing cybersecurity risk assessment procedures and control testing methodologies based on established frameworks and guidelines;
Assess NYC agencies' documented information security and technology policies, procedures, and practices;
Present risk findings to senior leadership;
Engage in communications with NYC agencies to assist them in successfully managing risk;
Manage and administer the cyber risk registry;
Build data integrations to improve visibility into the City's risk environment; and
Handle special projects and initiatives as assigned. HOURS/SHIFT
Day - Due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings. WORK LOCATION
Brooklyn, NY TO APPLY
* Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration Please go to and search for Job ID #791068 SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW
APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL OTI participates in E-Verify IT SECURITY SPECIALIST - 95622 Qualifications A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or, Education and/or experience which is equivalent to "1" above. Additional Information The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Cyber Risk Analyst in Brooklyn, NY vacancy
- ...will be given to candidates with prior experience in the Financial Services Industry. Position Summary: The Information Risk Analyst/Cybersecurity Risk Analyst will be responsible for developing risk assessment questionnaires, conducting risk assessments for...Suggested
- ...spirit of a startup, we’re hiring. SageSure, a leader in catastrophe-exposed property insurance, is seeking a Senior Catastrophe Risk Analyst. In this role, you’ll play a critical part in advancing the scientific, statistical, and model-based understanding of...SuggestedLive in
$105.4k - $207.8k
Position Summary Cyber Security & Risk Strategy Senior Consultant Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing...SuggestedLocal areaVisa sponsorship$110k - $130k
...Why join this team Support the implementation and maintenance of the Enterprise Risk Management (ERM) Framework in alignment with strategic objectives and regulatory requirements. Assist with ERM programs, including Issue Management, RCSA activities, process mapping,...SuggestedLocal area$120k - $150k
...where you can learn and thrive, Brown Brothers Harriman is the right place for you. Join us as our Custody and Digital Assets Risk Analyst. BBH is seeking a risk professional to support the risk and governance oversight of traditional and digital asset servicing...SuggestedWork experience placementLocal area- ...Cyber Security Analyst Onsite: New York W2 OR 1099 Exp: 8+ Visa: GC, USC, H4 Ead, L2 Ead The position requires fully on-site reporting. Provide support for all corporate and enclave firewalls, application delivery controllers, RADIUS, RSA. Develop and implement...Work experience placementLocal areaRotating shift
$105.4k - $207.8k
Position Summary Our Deloitte Cyber team understands the unique challenges and opportunities... ...outputs and alerts from Level 1 Analysts, and ensure that all identified events... ...on response action plans for information risk events and incidents based on incident type...Work at officeLocal areaVisa sponsorshipShift workRotating shift- ...Job Description Job Title: Infrastructure Risk Analyst Consultant \n Duration : 12 month contract, with extension possible to 18 months \n Location: Jersey City, NJ (3 days per week onsite) \n Pay Scale: $65-70/hr W2 (Cannot subcontract or C2C) \n Job...Contract work3 days per week
- ...and other relevant data tools and technologies. Python knowledge. Excellent communication skills. Strong analytical and problem-solving skills. Prior experience and understanding of Enterprise Market Risk/ Finance systems would be beneficial & preferred....Full time
$105.4k - $207.8k
Position Summary Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity... ...these skills: Proven ability to lead and coordinate a team of analysts across shiftsStrong client-facing communication skills, including...Local areaVisa sponsorshipShift workRotating shift$67k - $127k
...Analyst Position In Fidelity Risk Group's Quantitative Risk Analysis TeamAs an Analyst within Fidelity Risk Group's Quantitative Risk Analysis team, you will be working in a team-based, fast-paced environment. This role will expose you to the various facets of the financial...Full time$134.5k - $265.1k
...data subject rights, consent and preference management, privacy by design, privacy impact assessments, incident response, third-party risk, etc.Knowledge of Data Privacy Laws and Regulations: Familiarity with data privacy legislation such as GDPR, CCPA, LGPD, and other...Local area- ...Job Summary We are seeking a mid-to-senior level Technical Business Analyst with strong Market Risk, investment reporting, data analytics, and SQL experience to support ongoing initiatives within the Market Risk organization. The ideal candidate will have a strong...Full time
- ...Job Title Strong background in Capital Markets with hands on experience in Risk management Domain. Strong understanding of Credit Risk, Counterparty Credit Risk / Market Risk from an IT perspective. Strong experience in handling large transformation projects....
$78.68k - $157.88k
...Deloitte Audit and Assurance practice helps organizations effectively navigate business risks and opportunities—from strategic, reputation, and financial risks to operational, cyber, and regulatory risks—to gain competitive advantage. We apply our experience in ongoing...Work experience placementWork at officeLocal areaVisa sponsorship$82.6k - $162.8k
Position Summary Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity... ...response research; and collaborate with security operations center analysts, threat hunters, incident responders, Platform Operations...Local areaVisa sponsorship$105.4k - $207.8k
Position Summary Cyber Senior Consultant - DevSecOps Position Summary Are you interested in working in a dynamic environment that... ...software development lifecycle, including application intake, risk classification, architecture reviews, threat modeling, control assessments...Local areaWorldwideVisa sponsorship- Company DescriptionSonsoft , Inc. is a USA based corporation duly organized under the laws of the Commonwealth of Georgia. Sonsoft Inc. is growing at a steady pace specializing in the fields of Software Development, Software Consultancy and Information Technology Enabled...
- Responsible for conducting risk monitoring activities and ongoing risk assessments of FINRA members reporting to a Risk Monitoring Director.Essential Job Functions:This is a senior-level position reporting to a Risk Monitoring Director and supports both that direct manager...Full timeTemporary workFor contractorsFor subcontractorLocal areaImmediate start
$75 - $85 per hour
DescriptionCounterparty Credit Risk BA- Serves as a liaison between business stakeholders and technical teams, analyzing business processes... ..., problem-solving, and stakeholder management skills.- Business Analyst certification (e.g., CBAP, PMI-PBA) is a plus.Job Type &...Contract workTemporary work$120k - $150k
...DayPosted: 2026-10-14About the Team You will be part of the Enterprise Cyber Security organization responsible for evaluating the... ...testing partners, translating technical findings into actionable risk reduction, and mentoring other engineers without formal people-management...Full timeH1bWork at officeLocal areaHome officeRelocation packageMonday to Thursday$134.5k - $265.1k
Position Summary Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity.... ...advanced understanding of business processes, internal control risk management, IT controls and related standardsResponsible to install...Local areaVisa sponsorship$105.4k - $207.8k
...data subject rights, consent and preference management, privacy by design, privacy impact assessments, incident response, third-party risk, etc.Knowledge of Data Privacy Laws and Regulations: Familiarity with data privacy legislation such as GDPR, CCPA, LGPD, and other...Local area$105.4k - $207.8k
Position Summary Cyber Data Protection Senior ConsultantAre you passionate about helping leading organizations reduce cyber risk, protect critical data, and build resilience in an increasingly complex digital world? If so, consider joining Deloitte & Touche LLP’...Local area$82.6k - $162.8k
Position Summary Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions...Local areaVisa sponsorship- The Software Asset Management Analyst supports the end-to-end management of software assets, including inventory and entitlement accuracy... ...empower communities and businesses to make better decisions on risk, faster.At Verisk, you'll have the chance to use your voice and...Contract work
$77.5k - $116.3k
...data integrity, investigation methodology and mitigate privacy risks. Skills and attributes for success Desire to constantly... ...What we look for We’re interested in passionate analysts, with the intellectual curiosity to actively pursue new knowledge...Work experience placementSummer holidayWork at officeImmediate startFlexible hours- ...compromise (IOCs) – Act upon threat intelligence provided by Cyber Threat Intelligence function – Respond to Information Security... ...the detection of advanced threats – Mentor and train junior analysts to enhance the overall technical skillset of the SOC, establish...Full timeContract work
$105.4k - $207.8k
...Summary As a Physical Security Senior Consultant in Deloitte’s Cyber Defense & Resilience team, you will help clients strengthen... ...operations. You will apply experience in security assessments, risk analysis, and integrated protection strategies to identify vulnerabilities...Local areaVisa sponsorship$155.6k - $306.8k
Position Summary Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Deloitte’... ...solutions.8+ Years experience articulating technical concepts, risks, and trade-offs.8+ Years experience demonstrating accountability...Local areaVisa sponsorship
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Risk Analyst. Be the first to apply!




