FRFS Cyber Security Specialist

Overview

The Federal Reserve Bank of Boston Federal Reserve Financial Services (FRFS) delivers a suite of payments services to financial institutions via Fed Line Solutions, Fed Now, Fedwire, National Settlement Service (NSS), Fed Cash, FedACH (Automated Clearing House), and Check Services. We are leading a strategic effort to transform FRFS to a national, enterprise-focused organization to meet marketplace needs for new products and services, provide a more robust and unified customer experience across offerings, and create new career growth opportunities for FRFS staff.

The position is primarily on-site. The preferred work locations are New York or Chicago with residency commutable to that District. Candidates residing near any of our 12 Federal Reserve Banks may be considered.

This position will require travel up to 10% of the time.

• Execute and maintain NIST-based cyber risk assessments and management practices on FRFS information technology cloud and on-premises portfolio.
• Identify, measure, monitor and report on security risks within the information technology domain and assess the adequacy of controls including information security, cybersecurity and mitigation practices for technical vulnerabilities.
• Execute and maintain software security practices including security policies for tooling (SAST, DAST, OSS, IAST) to increase effectiveness and reduce false positives; promote and build procedures for the security champions in the Agile squads; and bring IS policy and standard expertise into the Agile squads.
• Review results from technical testing tools to identify vulnerabilities and contextualize the business impact on the respective payment services.
• Contribute to the vision, strategy, values and priorities that help the FRFS enterprise achieve its mission, as a member of the FRFS Technology Team.
• Develop close relationships with key stakeholders and external partners to ensure contemporary thinking, including the FRFS Technology Leadership Team, FRFS Leadership Team, and National IT stakeholders, with particular emphasis on collaboration with the Office of the Chief Information Security Officer to avoid duplicative services.

• Demonstrated working knowledge of enterprise cyber risk assessment and management and software security practices or equivalent experiences.
• Understanding and working experience with risk management and control frameworks (NIST 800-53) and industry best practices. Understanding of vulnerability risk impact on key outcomes and critical processes.
• Experience in risk management programs and initiatives to inform critical business strategies and processes. Knowledge of and experience implementing industry standards, frameworks, and best practices in cyber risk management programs, practices, and processes including risk identification, analysis, response, communication, monitoring and escalation.
• Experience in conducting IS or Cyber Risk assessments with Cloud and/or on-premises products in an agile development environment.
• Works independently with little oversight, serves as a thought leader for solving complex business problems with innovative solutions.
• Demonstrated ability to collaborate with peers in developing security and technical testing practices in alignment with business needs and FR System standards, translate the practices into actionable plans, and deliver results.
• Demonstrated ability to work cross-System with both embedded and matrixed resources in pursuit of a common objective.
• Excellent change management skills, including advocating, anticipating, and orchestrating change.

• Bachelor’s degree required in business, technology, information security or related fields or equivalent work experience.
• A minimum of 3 years of progressive experience in technology and information security; 5 years or more of progressive experience is preferred.
• Current or prior experience in the Federal Reserve System is beneficial.
• Federal Reserve System SAFR certification preferred, or commensurate certification and experience in information security assurance.

The Federal Reserve believes in salary transparency. The final salary and offer will be…