Cybersecurity & Risk Analyst

Responsibilities

• Perform mapping of regulatory requirements to policies, procedures, industry standards, frameworks, and existing controls
• Review policies and procedures that demonstrate compliance with regulatory requirements and work to address gaps and inconsistencies.
• Continue to develop and maintain a comprehensive library of applicable cybersecurity laws and regulations, as well as requirements and resulting controls.
• Monitor regulatory trends, guidance and new regulations which impact cybersecurity and require enhancements to the existing control framework.
• Prepare reports on the status of the program to appropriate governance structure(s) and senior management.
• Support the facilitation of impact assessments to evaluate new or changing regulations and readiness for compliance.
• Evaluate new initiatives and business ventures to identify and evaluate compliance requirements and readiness.
• Develop action plans for development and enhancement of cybersecurity controls and provide ongoing support and monitoring of the implementation of those controls.
• Evaluate policies and procedures to identify and address any compliance gaps or inconsistencies within the control framework and alignment with applicable regulations.
• Understand cyber and IT best practices including knowledge of frameworks, guidelines, and regulations (i.e., NIST Cybersecurity Framework, FFIEC, NYSDFS)
• Ensure cybersecurity and technology risk management meets all industry regulations, standards, and compliance requirements.

Qualifications

Specific Qualifications

J-18808-Ljbffr