Senior Cyber Risk & Compliance Strategist

Dime Community Bank; Hauppauge (NY); On-site; USD 85,000 - 105,000; Full time

Job summary

Dime Community Bank in Hauppauge, NY is seeking a Senior Cybersecurity Risk Analyst to support the CISO in developing and maintaining the information security program and risk framework. This role collaborates with risk, IT and audit teams to assess controls, monitor risks, and ensure compliance with FFIEC, GLBA, NYS DFS, and other standards.

The position offers a challenging, collaborative environment with opportunities to influence security posture across the bank's lines of business and

Qualifications

• Bachelor’s degree and minimum three years’ related experience and/or training; or equivalent combination of education and experience.
• Knowledge of banking operations and bank policy and procedure development.
• Knowledge of financial services regulatory requirements (FFIEC, GLBA, NYSDFS), and industry standards (NIST, ISO 27001/2).
• CISSP or CISM (or comparable certification) preferred.
• Experience administering GRC software.
• Experience with Security Awareness Training and Testing Platforms.
• Exposure to enterprise security tools (SIEM, vulnerability scanners, firewalls, identity governance and administration).
• Demonstrated understanding of technological trends and developments in information security, risk management, and business continuity.
• Demonstrated experience in the administration and management of the information security function, including FFIEC and DFS regulations and audits.
• High regard for quality and risk management practices.
• Excellent oral and written communication skills.
• Ability to work outside of normal business hours on occasion.

Responsibilities

• Plan, coordinate and develop recommendations for all aspects of information security policies and procedures.
• Ensure compliance with information security policies across procedures and use; engage vendors and systems professionals to advance security goals.
• Develop and maintain policies, standards, processes, and procedures to assess, monitor, report, elevate and remediate information security risks.
• Ensure risk assessments are performed and controls tested; report results of the annual information security risk assessment.
• Maintain the information security risk register and resolve compliance variances.
• Develop and deliver activities to influence information security culture and staff awareness.
• Present program status to Senior Management and the Board; coordinate audits and examinations.
• Monitor regulatory environment to prepare for new laws, guidance, and frameworks.

Skills

Risk management

Information security

Regulatory knowledge

Communication skills

Security awareness training

Executive reporting

Education

Bachelor’s degree

Tools

GRC software

SIEM

Vulnerability scanners

Firewalls

Identity governance

Microsoft Office

Job description

Dime Community Bank in Hauppauge, NY is seeking a Senior Cybersecurity Risk Analyst to support the CISO in developing and maintaining the information security program and risk framework. This role collaborates with risk, IT and audit teams to assess controls, monitor risks, and ensure compliance with FFIEC, GLBA, NYS DFS, and other standards.

The position offers a challenging, collaborative environment with opportunities to influence security posture across the bank's lines of business and