Cybersecurity Audit Lead for NYC Agencies

City of New York; New York (NY); On-site; USD 90,000 - 100,000; Full time

Job summary

The City of New York's Office of Technology and Innovation (OTI) seeks an IT Security Specialist for Cyber Command in Brooklyn. You will review security assessments, conduct risk-based cybersecurity audits, and help ensure compliance with citywide policies.

Work hours may include weekends and nights due to 24/7 operations. The role requires a baccalaureate degree and four years of related experience; the team supports public safety and critical city services.

Qualifications

• Baccalaureate degree required; four years of satisfactory full-time experience related to projects and policies.

Responsibilities

• Review security assessment and service performance reports to identify significant issues and initiate corrective actions.
• Review and analyze cybersecurity risk cases, including justification and exceptions documents submitted by agencies.
• Assist in developing cybersecurity risk and compliance assessment procedures and testing methodologies.
• Assess NYC Agencies' information security policies, procedures, and practices.
• Evaluate cybersecurity programs to ensure compliance with city policies and standards.
• Conduct risk-based cybersecurity audits of NYC agencies' programs and controls.
• Execute audit procedures, test controls, and document results according to audit methodologies.
• Draft and present findings with working papers and control assessments.
• Maintain audit working papers and communicate results clearly to stakeholders.
• Track remediation of audit findings and compliance gaps.
• Analyze regulatory and policy requirements; document gaps and recommendations.
• Engage with NYC Agencies to assist compliance with citywide policies.
• Handle special projects and initiatives as assigned.

Education

Baccalaureate degree

4 years of related experience

Job description

The City of New York's Office of Technology and Innovation (OTI) seeks an IT Security Specialist for Cyber Command in Brooklyn. You will review security assessments, conduct risk-based cybersecurity audits, and help ensure compliance with citywide policies.

Work hours may include weekends and nights due to 24/7 operations. The role requires a baccalaureate degree and four years of related experience; the team supports public safety and critical city services.