Senior IT Security & Risk Architect (Cloud & HIPAA)

NYU Langone Health; New York (NY); On-site; USD 122,000 - 210,000; Full time

Job summary

NYU Langone Health is seeking a Lead IT Security Analyst to join the IT Controls & Regulatory Compliance team. The role leads enterprise risk assessments and evaluates security across cloud and on‑prem environments, partnering with IT, Security, Clinical, Research, and Compliance stakeholders.

You will design and mature risk assessment programs, align with HIPAA, HITRUST, PCI DSS, and FISMA, and guide secure design and data protection.

Qualifications

• Typically requires 10+ years of experience and a BA/BS degree or equivalent.
• Experience leading enterprise risk assessments and evaluating security across cloud/hybrid environments.
• Strong collaboration with IT, Security, Clinical, Research and Compliance stakeholders.

Responsibilities

• Lead enterprise risk assessment program execution and maturation.
• Oversee HIPAA/HITRUST-aligned risk evaluations.
• Define risk methodologies, scoring models, and standards.
• Assess cloud/hybrid environments and critical control domains (IAM, network, logging, data protection).
• Provide guidance on secure design and data protection strategies.
• Serve as senior escalation point for complex risk assessments and audits.

Skills

Risk assessment

Regulatory compliance

Cloud security

Leadership

Communication

Education

BA/BS degree

Advanced degree desirable

Job description

NYU Langone Health is seeking a Lead IT Security Analyst to join the IT Controls & Regulatory Compliance team. The role leads enterprise risk assessments and evaluates security across cloud and on‑prem environments, partnering with IT, Security, Clinical, Research, and Compliance stakeholders.

You will design and mature risk assessment programs, align with HIPAA, HITRUST, PCI DSS, and FISMA, and guide secure design and data protection.