Senior Cyber Risk & Governance Analyst (Remote)

First Citizens Bank; North Carolina; Remote; USD 120,000 - 170,000; Full time

Job summary

First Citizens Bank is seeking a Senior Cyber Risk Manager to lead risk assessments and governance across the organization. You will apply NIST CSF, SP 800-53, ISO 27001, FFIEC guidance and coordinate remediation with stakeholders.

Strong communication and technical expertise in IAM, network and cloud security are essential. This role supports remote work in NC, AZ, and TX, with risk reporting to executive leadership and ongoing method improvements to strengthen security posture within a major

Qualifications

• Experience leading cybersecurity maturity and risk assessments using industry frameworks.
• Knowledge of CRI Profile, NIST CSF, NIST SP 800-53, ISO 27001 and FFIEC guidance.
• Ability to map controls to frameworks and identify remediation gaps.
• Hands-on technical understanding across IAM, network, cloud, endpoints.
• Ability to communicate results to stakeholders and executives.
• Experience with risk reporting dashboards and trend analysis

Responsibilities

• Leads cybersecurity risk assessments and maturity reviews across domains.
• Identifies risk, defines remediation plans and tracks progress with stakeholders.
• Applies CSF, SP 800-53, ISO 27001, FFIEC to benchmark risk posture.
• Provides technical risk guidance across IAM, network, cloud, and endpoints.
• Partners with business and control owners to drive risk reduction.
• Develops risk reports and dashboards for leadership visibility.
• Maintains up-to-date risk methodologies and reporting practices

Skills

Cyber risk assessments

Risk identification

Framework application

Cyber technical expertise

Stakeholder partnership

Monitoring & reporting

Continuous improvement

Education

Bachelor's Degree + 6 years experience

High School Diploma or GED + 10 years experience

Job description

First Citizens Bank is seeking a Senior Cyber Risk Manager to lead risk assessments and governance across the organization. You will apply NIST CSF, SP 800-53, ISO 27001, FFIEC guidance and coordinate remediation with stakeholders.

Strong communication and technical expertise in IAM, network and cloud security are essential. This role supports remote work in NC, AZ, and TX, with risk reporting to executive leadership and ongoing method improvements to strengthen security posture within a major