Cyber Risk Compliance – Regulatory Exams & Controls

New York Life; New York (NY); Hybrid; USD 112,000 - 130,000; Full time

Job summary

New York Life is seeking a Senior Associate to drive cybersecurity regulatory compliance certifications and regulatory examinations coordination in a hybrid work environment.

You will maintain trackers, coordinate with multiple stakeholders, and ensure evidence accuracy across SEC and FINRA processes, while leveraging Microsoft 365 tools and DocuSign workflows. The role emphasizes analytical thinking, documentation quality, and cross-team collaboration.

Qualifications

• Bachelor's degree in Information Security/Technology, Cybersecurity, Risk Management, or a related field, or equivalent work experience.
• 3+ years of experience in cybersecurity risk, technology risk, IT audit, regulatory compliance, or related GRC functions, preferably in financial services or insurance.
• Proven experience supporting IT/cybersecurity audits, regulatory examinations, MAR/SOX compliance activities, or related reviews.
• Demonstrated knowledge of information security principles, controls, and technology risk management to assess evidence and identify gaps.
• Ability to analyze complex information, manage priorities, and work independently with limited oversight.
• Strong organizational, project management, written communication, and stakeholder management skills.

Responsibilities

• Maintain a detailed tracker of state cybersecurity requirements with evidence, due dates, and year-over-year changes.
• Review tracker daily and report status to CRC team weekly.
• Coordinate with stakeholders across internal teams, evidence providers, reviewers, and approvers.
• Review responses and evidence for accuracy and alignment to state requirements; guide evidence needs.
• Organize responses and evidence in the CRC SharePoint site for review and approvals.
• Manage the DocuSign sign-off process, create templates, track responses, and send reminders.
• Collaborate with CRC Lead to analyze improvements to procedures and involve key stakeholders.
• Serve as liaison between state examiners, Legal, and Cybersecurity/Technology teams; coordinate exam requests.

Skills

Cybersecurity risk

Regulatory compliance

GRC

Stakeholder management

Project management

Written communication

Education

Bachelor's degree in Information Security/Technology, Cybersecurity, Risk Management, or related field

Tools

Microsoft 365

Teams

SharePoint

DocuSign

ChatGPT

Copilot

Job description

New York Life is seeking a Senior Associate to drive cybersecurity regulatory compliance certifications and regulatory examinations coordination in a hybrid work environment.

You will maintain trackers, coordinate with multiple stakeholders, and ensure evidence accuracy across SEC and FINRA processes, while leveraging Microsoft 365 tools and DocuSign workflows. The role emphasizes analytical thinking, documentation quality, and cross-team collaboration.