Cyber Risk Analyst, Office of Chief Information Officer

NYC Department of Health and Mental Hygiene; New York (NY); Hybrid; USD 75,000 - 130,000; Full time

Job summary

An established industry player is seeking a Cyber Risk Analyst to enhance public health through innovative technology. In this pivotal role, you will collaborate with cross-functional teams to assess and mitigate cybersecurity risks across various digital platforms, ensuring compliance with security standards. You'll lead initiatives to improve risk assessment methodologies while continuously monitoring threats and vulnerabilities. This position offers the chance to make a significant impact on public health while enjoying comprehensive benefits and job security. If you're passionate about cybersecurity and public service, this role is for you.

Benefits

Loan forgiveness programs

Comprehensive health insurance

Pension plans

Wellness programs

Work-from-home options

Job security

Qualifications

• Bachelor's degree in IT or Computer Science and 4+ years of related experience.
• Deep knowledge of security controls and frameworks.

Responsibilities

• Identify and assess cybersecurity risks related to digital operations.
• Develop and refine risk acceptance processes balancing business needs.

Skills

Cybersecurity Risk Assessment

Communication of Cybersecurity Concepts

Knowledge of Security Controls and Frameworks

Education

Bachelor's degree in IT or Computer Science

8+ years of relevant experience

Job description

Cyber Risk Analyst, Office of Chief Information Officer

Join to apply for the Cyber Risk Analyst, Office of Chief Information Officer role at NYC Department of Health and Mental Hygiene.

Job Overview

The Division of Information Technology aims to promote and protect the health of all New Yorkers through innovative technology and accessible health information.

Key Responsibilities

• Collaborate with cross-functional teams to identify and assess cybersecurity risks related to digital operations, applications, cloud solutions, firewalls, IoT devices, software, custom development, and technology acquisitions.
• Fulfill risk assessment tickets promptly, ensuring accurate documentation and go-live readiness.
• Stay updated on security, privacy, and regulatory issues; advise on security provisions in contracts; respond to third-party change requests to ensure compliance and data protection.
• Develop and refine risk acceptance processes, balancing business needs with cybersecurity requirements.
• Lead initiatives to improve risk assessment efficiency and methodology, ensuring alignment with industry best practices.
• Continuously monitor cybersecurity threats, vulnerabilities, and attack vectors, and adapt workflows accordingly.
• Engage in ongoing learning through industry events and professional development to stay current.
• Work with IT project teams to conduct security analyses across technologies including cloud, network, connected devices, software, and acquisitions.

Preferred Skills

• Experience leading cybersecurity initiatives and decision-making across diverse tech domains.
• Ability to communicate complex cybersecurity concepts effectively to stakeholders.
• Deep knowledge of security controls, frameworks, and standards, with a focus on continuous improvement.

Minimum Qualifications

• Bachelor's degree in IT or Computer Science and 4+ years of related experience, or 8+ years of relevant experience without a degree, or equivalent education/experience.

Additional Information

This position is open to qualified persons with a disability under the 55-a Program. Residency in NYC is not required.

The annual salary range is $75,000 - $130,000.

Why Join Us?

• Loan forgiveness programs.
• Comprehensive benefits including health insurance, pension, and wellness programs.
• Work-from-home options depending on the role.
• Job security and the opportunity to impact public health positively.

Our department is committed to diversity and equal opportunity. For accommodations, contact Sye-Eun Ahn at [e-mail].