Cyber Security Risk Analyst

Federal Reserve Bank of New York; New York (NY); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Educational assistance

Comprehensive insurance plans

Pension plan and 401(k) with generous match

Job summary

The Federal Reserve Bank of New York is seeking a Cyber Security Assurance Analyst to assess risks related to third-party vendors and cloud infrastructure. This role will involve performing security assessments, managing security testing, and providing guidance throughout the software development life-cycle.

Key qualifications include experience with NIST 800‑53, strong DevSecOps culture experience, and the ability to maintain a National Security Clearance. The position offers a salary range between $170,000 and $230,000 per year and various employee benefits.

Qualifications

• Must possess or hold the ability to obtain and maintain a National Security Clearance; U.S. citizenship required.

Responsibilities

• Perform cloud application security risk assessments.
• Execute risk assessments according to NIST 800‑53 guidelines.
• Manage relationships with business units to deliver security advice.
• Perform application security testing for compliance.
• Support integration of security tooling into CI/CD pipeline.

Skills

Experience executing security assessments in cloud environments

Expert knowledge of risk management based on NIST 800‑53

Proficiency in vulnerability risk impact analysis

Strong DevSecOps culture experience

Demonstrated leadership and project management

Expert application security testing skills

Experience evaluating and securing third-party vendors

Ability to evaluate and secure generative AI systems

Job description

Job Summary

Cyber Security Assurance Analyst – New York Fed – Information Security FunctionThe Cyber Security Assurance (CSA) department assesses risks associated with third‑party vendors, systems, software, IoT devices, industrial control systems, and cloud infrastructure that handle Federal Reserve data. This analyst collaborates directly with business units and embedded development squads to provide risk management, security testing, and DevSecOps guidance throughout the software development life‑cycle.

Responsibilities

• Perform cloud application security risk assessments, focusing on migration workloads supporting market operations.
• Execute risk assessments timely and accurately according to NIST 800‑53 guidelines.
• Manage relationships with assigned business units and embed within development squads to deliver timely security advice.
• Perform application security testing to ensure only compliant workloads move to the cloud.
• Support squads in integrating security tooling into the CI/CD pipeline.

Qualifications and Skills

• Experience executing security assessments in cloud environments and against third‑party SaaS solutions.
• Expert knowledge of risk management based on NIST 800‑53, including linking risk programs to critical business strategies.
• Proficiency in vulnerability risk impact analysis and timely resolution using agile practices.
• Strong DevSecOps culture experience, working closely with developers in an agile, rapid‑release environment.
• Demonstrated leadership and project management, with strong decision‑making and execution abilities.
• Expert application security testing skills supporting CI/CD pipelines.
• Experience evaluating and securing third‑party vendors that protect Federal Reserve data.
• Ability to evaluate and secure generative AI systems with internal and embedded models.
• Must possess or hold the ability to obtain and maintain a National Security Clearance; U.S. citizenship required.

Salary Range

$170,000 – $230,000 per year

Benefits

• Educational assistance, career development tools, and stretch opportunities.
• Parental leave, adoption assistance, backup dependent and elder care, college planning resources.
• Comprehensive insurance plans, leave policies, onsite health & wellness center, and onsite fitness center.
• Pension plan, 401(k) with generous match, financial planning resources, and subsidized public transportation program.

Equal Opportunity Statement

The Federal Reserve Banks are committed to equal employment opportunity for employees and applicants in compliance with applicable law and to an environment where employees are valued for their differences.

Accessibility Statement

We value accessibility for all candidates and are happy to provide an accommodation or assistance. Please email us at [e-mail] for accommodation requests related to our recruiting process.