Remote Cyber Risk Analyst III – Security & Governance

First Citizens Bank; Virginia; Remote; USD 140,000 - 180,000; Full time

Job summary

First Citizens Bank is seeking an experienced Cyber Risk Manager to lead enterprise risk assessments across governance and technology domains. You will map controls to frameworks, identify gaps, and work with stakeholders to close gaps and strengthen security posture.

The role emphasizes crafting clear risk reports, informing leadership, and guiding remediation efforts while staying current with evolving standards and regulations in a highly regulated financial environment.

Qualifications

• Bachelor's Degree and 6 years' experience OR High School Diploma or GED/Equivalent and 10 years' experience in Information Security.
• Experience with CRI Profile, CSF, NIST 800-53, ISO 27001, FFIEC guidance.
• Strong written and verbal communication skills; ability to influence at multiple levels.
• Regulatory knowledge including FFIEC, OCC, FRB, NYDFS, HIPAA.

Responsibilities

• Leads cybersecurity risk assessments using CSF, NIST SP 800-53, ISO 27001, FFIEC.
• Identifies risks, defines remediation plans, and tracks progress.
• Applies frameworks to benchmark risk posture and close gaps.
• Utilizes IAM, network, cloud, endpoint protection, and vulnerability management domains.
• Communicates assessment results to stakeholders and promotes risk awareness.
• Develops risk reports and dashboards; monitors remediation and escalations.
• Maintains current knowledge of industry standards and regulatory changes.

Skills

Cyber risk assessments

Risk identification

Framework mapping

Technical cybersecurity knowledge

Stakeholder communication

Reporting & dashboards

Continuous improvement

Education

Bachelor's Degree

High School Diploma or GED

Job description

First Citizens Bank is seeking an experienced Cyber Risk Manager to lead enterprise risk assessments across governance and technology domains. You will map controls to frameworks, identify gaps, and work with stakeholders to close gaps and strengthen security posture.

The role emphasizes crafting clear risk reports, informing leadership, and guiding remediation efforts while staying current with evolving standards and regulations in a highly regulated financial environment.