Cybersecurity Senior Risk Analyst

Cybersecurity Senior Risk Analyst

Brooklyn, New York

Work schedule:

Monday to Friday, normal business hours, 35 hours per week (mandatory unpaid meal break after 6 hours).

• $60 per hour

Note:

Overtime beyond 35 hours per week must be pre-approved through the agency’s timekeeping system.

The Cybersecurity Senior Risk Analyst will support citywide cybersecurity risk initiatives by developing, evaluating, and managing risk frameworks and processes.

• Build and implement cybersecurity risk processes and frameworks to improve risk monitoring and evaluation across the City
• Manage complex, cross‑functional projects while navigating ambiguity and challenges
• Collaborate with stakeholders across multiple divisions, gathering input and addressing feedback
• Evaluate cybersecurity risks associated with third‑party vendors used by NYC agencies
• Document and track risk remediation activities in the Risk Register
• Review and analyze cybersecurity risk cases, justifications, and exception requests submitted by agencies
• Assist in developing cybersecurity risk assessment procedures and testing methodologies based on established frameworks
• Initiate corrective actions to remediate identified vulnerabilities or weaknesses
• Communicate and coordinate with NYC agencies on risk‑related matters
• Support special projects and initiatives as assigned

• Minimum 4 years of experience in:
• Cybersecurity risk management or risk assessment OR
• Evaluating and managing third‑party cybersecurity risk within a cybersecurity team

• Bachelor’s degree in Cybersecurity, Risk Management, Information Systems, Computer Science, or a related field
• One or more certifications preferred:
• CISA, CISSP, CRISC, CISM
• CompTIA Security+, Network+, A+, CySA+
• CCNA, CEH
• GIAC (GIPS, GSEC)
• Strong teamwork and collaboration skills
• Highly organized, self‑motivated, and detail‑oriented
• Knowledge of hardware, software, data, and network principles in public and/or private sector environments
• Understanding of operating systems, databases, and network architectures
• Familiarity with cybersecurity frameworks such as NIST, SANS, PCI, ISO 27001/27002, or CIS
• Strong investigative and analytical abilities
• Excellent verbal and written communication skills
• Knowledge of the current and evolving cyber threat landscape
• Understanding of cybersecurity laws, regulations, policies, and information privacy standards

Compensation: $60.00 per hour