Senior Cyber Risk Analyst (Remote)

First Citizens Bank; Raleigh (NC); Remote; USD 120,000 - 180,000; Full time

Job summary

First Citizens Bank is seeking a senior Cyber Risk Assessments Lead to provide governance-level risk management across the organization. The role focuses on risk identification, framework mapping, remediation tracking, and leadership reporting.

Remote-friendly role (NC, AZ, TX) with responsibilities across applying NIST CSF, ISO 27001, FFIEC, and CRI Profile; coordinating with control owners; developing dashboards; and driving continuous improvement in risk processes.

Qualifications

• Bachelor's degree in Information Security or related field or equivalent experience.
• 6+ years of information security experience; or 10 years with a HS diploma.
• Experience performing cybersecurity risk assessments and framing remediation.

Responsibilities

• Leads cybersecurity maturity and risk assessments using industry frameworks (CRI Profile, NIST CSF, NIST SP 800-53, ISO 27001, FFIEC).
• Identifies risks across operational, technology, and regulatory domains and tracks remediation.
• Applies CSF, SP 800-53, ISO 27001, FFIEC requirements to benchmark risk posture and close gaps.
• Leverages IAM, network/cloud security, vulnerability management, and security architecture to assess risk and validate controls.
• Partners with stakeholders to communicate results and promote risk awareness and accountability.
• Develops risk assessment reports and dashboards; reports trends to leadership and tracks remediation progress.
• Maintains awareness of evolving standards to keep assessments current and effective.

Skills

Cyber risk assessments

Risk mitigation

Framework application

Technical cybersecurity

Stakeholder collaboration

Education

Bachelor's degree

High School Diploma or GED

Tools

CRI Profile

NIST CSF

NIST SP 800-53

ISO 27001

FFIEC guidance

Job description

First Citizens Bank is seeking a senior Cyber Risk Assessments Lead to provide governance-level risk management across the organization. The role focuses on risk identification, framework mapping, remediation tracking, and leadership reporting.

Remote-friendly role (NC, AZ, TX) with responsibilities across applying NIST CSF, ISO 27001, FFIEC, and CRI Profile; coordinating with control owners; developing dashboards; and driving continuous improvement in risk processes.