Hybrid IT Risk & Compliance Analyst

Trinity Church NYC; New York (NY); Hybrid; USD 126,100 - 157,900; Full time

Job summary

Trinity Church NYC in New York, NY seeks an IT Risk & Compliance Analyst to safeguard its technology environment by managing cybersecurity risk, regulatory compliance and business continuity programs.

The role supports security policy development, conducts risk assessments, oversees disaster recovery planning, and coordinates incident response, with hands‑on oversight of log reviews, vulnerability scans and threat monitoring. Hybrid work model offered.

Qualifications

• Bachelor’s degree or equivalent in a cybersecurity/IT field.
• 3–5 years of IT risk management, information security, or IT audit experience.
• Experience supporting disaster recovery planning and regulatory compliance efforts.
• Strong communication and stakeholder management skills.

Responsibilities

• Governance: develop vendor risk management frameworks and coordinate security policies.
• Third‑party risk management: assess and monitor third‑party risks and provider documentation.
• Security awareness and training: develop and promote role‑based security training.
• Audit and compliance: liaise with Legal and respond to findings from audits and assessments.
• Security monitoring and incident response: assist in incident response planning and execution.

Skills

IT risk frameworks

Regulatory compliance

PCI DSS

NIST

ISO 27001

Disaster recovery

Vendor risk management

Security incident response

Threat monitoring

Communication skills

Education

Bachelor’s degree in Cybersecurity or related field

3–5 years IT risk management / information security / IT audit

Tools

Threat detection platforms

Endpoint security tools

Vulnerability scanning tools

Log analysis tools

Job description

Trinity Church NYC in New York, NY seeks an IT Risk & Compliance Analyst to safeguard its technology environment by managing cybersecurity risk, regulatory compliance and business continuity programs.

The role supports security policy development, conducts risk assessments, oversees disaster recovery planning, and coordinates incident response, with hands‑on oversight of log reviews, vulnerability scans and threat monitoring. Hybrid work model offered.