Cyber GRC Analyst - Citywide Audits

New York City Office of Technology & Innovation; New York (NY); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Public Service Loan Forgiveness

Job summary

New York City Office of Technology & Innovation (OTI) is seeking a Cyber Governance, Risk and Compliance Analyst for the Cyber Command. You will shape NYC agencies' cybersecurity risk and compliance postures, enforce citywide policies, and support audits across numerous systems.

The role emphasizes evaluating programs, reporting findings, and driving remediation in a 24/7 environment from our Brooklyn location. Knowledge of NIST/ISO frameworks and strong communication are essential.

Qualifications

• Bachelor's degree and four years of related experience or equivalent.
• Knowledge of cybersecurity frameworks (NIST, SANS, PCI, ISO 27001/27002, CIS).
• Familiarity with internal audit principles, risk-based audit planning, audit evidence and documentation.
• Experience in cybersecurity risk assessment or auditing IT systems.
• Ability to explain technical findings clearly to both technical and nontechnical audiences.

Responsibilities

• Review security assessment and service performance reports to identify issues and initiate corrective actions.
• Review and analyze cybersecurity risk cases and exceptions submitted by agencies.
• Develop cybersecurity risk and compliance assessment procedures and testing methodologies.
• Assess agencies' information security policies, procedures, and practices.
• Conduct evaluations of cybersecurity programs to ensure policy and standard compliance.
• Execute audit procedures and document results per established methodologies.
• Draft and present findings with working papers and control assessments.
• Maintain audit working papers that support observations and recommendations.
• Track remediation of audit findings and gaps in compliance.
• Analyze legal, regulatory, and policy requirements relevant to cybersecurity controls.

Skills

Cybersecurity knowledge

Audit & compliance

Analytical skills

Communication skills

Team collaboration

Education

Baccalaureate degree in Cybersecurity or related field

BS/BA in Information Systems or Computer Science

J.D./LL.M. or related legal education welcomed

Job description

New York City Office of Technology & Innovation (OTI) is seeking a Cyber Governance, Risk and Compliance Analyst for the Cyber Command. You will shape NYC agencies' cybersecurity risk and compliance postures, enforce citywide policies, and support audits across numerous systems.

The role emphasizes evaluating programs, reporting findings, and driving remediation in a 24/7 environment from our Brooklyn location. Knowledge of NIST/ISO frameworks and strong communication are essential.