Senior Cyber Risk Analyst — Remote (NIST/ISO)

First Citizens Bank; Austin (TX); Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Benefits package

Job summary

First Citizens Bank is seeking an experienced Cyber Risk Manager to lead enterprise risk assessments and mitigation across IT and business domains. You will apply NIST CSF, SP 800-53, ISO 27001, and FFIEC guidance to identify control gaps, map evidence to requirements, and drive remediation with stakeholders.

Responsibilities include developing risk dashboards, communicating trends to leadership, and maintaining awareness of evolving threat landscapes.

Qualifications

• Bachelor's degree and 6 years' information security experience.

Responsibilities

• Leads and supports cybersecurity maturity and risk assessments using industry frameworks.
• Identifies risks across operational, technology, and regulatory domains and tracks remediation plans.
• Applies CSF, NIST SP 800-53, ISO 27001, FFIEC guidelines to assess risk posture and provide recommendations.
• Provides technical risk mitigation insights across IAM, network, cloud, endpoints, and vulnerability management.
• Collaborates with stakeholders to communicate results and promote risk management accountability.
• Develops risk reports and dashboards; tracks remediation progress and flags overdue actions.
• Keeps current with industry standards and regulatory requirements to enhance assessment methods.

Skills

Cyber risk assessments

Risk identification

Framework application

Technical cybersecurity knowledge

Stakeholder management

Monitoring & reporting

Continuous improvement

Education

Bachelor's Degree

GED/High School Diploma

Tools

CRI Profile

NIST CSF

NIST SP 800-53

ISO 27001

FFIEC guidance

Job description

First Citizens Bank is seeking an experienced Cyber Risk Manager to lead enterprise risk assessments and mitigation across IT and business domains. You will apply NIST CSF, SP 800-53, ISO 27001, and FFIEC guidance to identify control gaps, map evidence to requirements, and drive remediation with stakeholders.

Responsibilities include developing risk dashboards, communicating trends to leadership, and maintaining awareness of evolving threat landscapes.