Cyber Security Risk Analyst

The Cyber Security Risk Analyst will assess and review technologies and report on associated risks. This person will also maintain a cyber security risk register for all ongoing efforts and will be the front face forsecurity risk assessments and work closely with NYCERS stakeholders to address the risks in a timely manner without impacting the overall project timeline. In addition, this resource will be responsible for monitoring and analyzing vulnerabilities related to the NYCERS platform, conduct threat and risk assessments and provide recommendations and solutions forremediation. MANDATORY SKILLS/EXPERIENCE

• A baccalaureate degree, from an accredited college
• Valid holder of any one of the following:

• Technical background in cloud platforms, network architecture, endpoint security, encryption methodologies, experience with vulnerability management tools, and security incident response process.
• Collaborative issue/remediation on a broad set of IT related issues: Cybersecurity risks, regulatory, data protection, user access, various controls, etc.
• Performing reviews of related IT Compliance documentation, procedures and controls, including creating work papers and making recommendations forremediation.
• Fine-tune, optimize, and support existing security tools used for security monitoring, detection of events, and incident response efforts. For example, SIEM, EDR, CASB, etc.
• Conduct threat and risk analysis and provide viable solutions for them.
• Minimum of 8 years of full time Cyber Security experience.
• Security hardening procedures related to cloud platforms.
• Basic understanding and knowledge of Security Frameworks (NIST, ISO)