Cybersecurity Analyst III

Job Responsibilities

• Continuously monitor the internal and external landscape for relevant events, risks, and threats related to malicious code, vulnerabilities, and potential attacks in alignment with the MITRE ATT&CK framework.
• Remain current with emerging threats and share knowledge with colleagues to improve incident response processes.
• Help coordinate and ensure cybersecurity-related alerts and incidents are prioritized and responded to at all hours of the day.
• Act as a technology, service or process owner as appropriate, ensuring appropriate documentation, configuration, maintenance and access reviews of technologies, vended services and processes.
• Participate in coordination, consultation, and assessment efforts to track and remediate events and alerts, direct response to related incidents, internal or external audits, and control assessments.
• Collaborate with Enterprise Information & Technology (EI&T) teams to protect data from compliance, privacy or security compromises.
• Participate in the creation and execution of tabletop, purple team, and attack simulation exercises designed to identify gaps, improve skills, enhance communication and engage with key stakeholders.
• Review findings from tabletop exercises, vulnerability scans and penetration testing to identify weaknesses or gaps in existing security controls and assist in providing recommendations where appropriate.
• Review and evaluate third‑party security posture, identify risks, document findings, and support remediation efforts to ensure vendors and partners meet organizational security standards.
• Identify risks throughout the organization, report and monitor risk formats and develop methodologies for assessment of risks.
• Contribute to the development, tracking, and reporting of security metrics and KPIs for team activities, using insights to drive continuous improvement, reduce security risk and inform other security education opportunities.
• Provide strategic direction of the Cybersecurity team to develop new capabilities, process efficiencies and goals.
• Assist in the development, review, maintenance and development of security policies, standards, processes, procedures and requirements to facilitate common administrative controls.
• Develop content for organization‑wide and targeted security awareness training.
• Present relevant cybersecurity topics through a variety of forums depending on the audience.
• Support leadership with all aspects of the cybersecurity enterprise‑wide risk management program, with minimal supervision.
• Participate in various security assessments in support of compliance, privacy or security requirements for the enterprise.
• Lead localized assessments where appropriate.
• Provide cybersecurity guidance as appropriate and Escalate issues as deemed appropriate.

• Bachelor’s degree in computer science, information systems, or related field, or equivalent combination of education and/or related professional work experience.
• 3+ years of demonstrated proficiency with a cybersecurity audit, assessment, engineering or architecture focus or comparable professional experience.
• Knowledge of cybersecurity regulations, guidance and policies (e.g., PCI‑DSS, NYDFS, CCPA).
• Knowledge of general security concepts and methods such as vulnerability assessments, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, and governance.
• Proven ability to clearly and effectively communicate business and technical information, both verbally and in writing.
• Basic leadership and teaming skills as well as demonstrated integrity within a professional environment.
• Aptitude for speaking or communicating to varied groups of business and technical professionals.
• Experience in presenting technical material to a non‑technical audience and to senior management.
• Experience in the review and development of security policies, standards or other governance practices.
• Demonstrated relationship management and consulting skills, including ability to effectively influence and negotiate.
• Proven ability to provide high‑quality customer service.
• Preferred:
  Financial Services industry experience.

Base Salary Range: $95,000.00 - $. In addition to your base pay, you may be eligible for an annual incentive (bonus) plan.

• Medical, dental, and vision insurance.
• Employee assistance program, life and disability insurance.
• Parental leave and paid time off.
• 401(k) plan and retirement assistance.
• Tuition reimbursement.
• Flexible workplace options including hybrid working arrangements.