Cyber Security Analyst III

This is a fully remote position, open to applicants in Arizona, +3 more states.

📋 Description

• Oversees and facilitates cybersecurity maturity and risk assessments utilizing the Cyber Risk Institute (CRI) Profile, NIST CSF, NIST SP 800-53, ISO 27001, and FFIEC guidance.

• Aligns control evidence with framework requirements, assesses maturity levels, identifies deficiencies, formulates recommendations, and aids in remediation planning and monitoring.

• Detects potential risks in operational, technological, and regulatory areas.

• Collaborates with stakeholders to establish and monitor remediation plans, while implementing risk mitigation strategies that align with business goals and regulatory standards.

• Utilizes industry-standard frameworks to evaluate and benchmark the organization's risk posture.

• Performs gap analyses, interprets requirements, and proposes solutions for compliance or control deficiencies.

• Applies technical expertise in identity and access management, network security, cloud security, endpoint protection, vulnerability management, and security architecture to assess risks and validate controls.

• Works with business, technology, and control owners to convey assessment findings and enhance cybersecurity risk awareness.

• Creates and updates risk assessment reports and dashboards.

• Shares trends, patterns, and emerging risks with leadership.

• Monitors remediation progress, escalates overdue tasks, and identifies areas needing additional oversight.

• Stays informed about industry standards, threat landscapes, and regulatory requirements.

• Integrates emerging practices into the organization's risk assessment methodology.

⛳️ Requirements

• Bachelor's Degree and 6 years of experience OR High School Diploma or GED/Equivalent with 10 years of experience in Information Security.

• Hands-on experience in conducting cybersecurity risk assessments, including scoping, evaluation, gap analysis, and reporting.

• Profound knowledge of cybersecurity frameworks and assessment methodologies, such as the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, and FFIEC guidance.

• Proven experience applying cybersecurity frameworks within complex and highly regulated environments.

• Direct experience executing Cyber Risk Institute (CRI) Profile assessments, including control mapping, evidence analysis, maturity evaluation, gap identification, reporting, and remediation tracking.

• Technical proficiency in IAM, security architecture, network and cloud security, endpoint protection, and vulnerability management.

• Experience in identifying risks, developing remediation strategies, and collaborating with stakeholders to mitigate risk exposure.

• Comprehensive practical knowledge of internal controls, cybersecurity processes, and risk management methodologies.

• Exceptional written and verbal communication skills, with the ability to influence stakeholders and effectively communicate across various levels.

• Professional certifications such as CISSP, CISA, CISM, CRISC, or equivalent.

• 7–10 years of experience in cybersecurity risk management or cyber risk oversight, including direct involvement in cyber risk assessments.

• 3+ years of experience within a Large Financial Institution or a similarly regulated setting.

• Familiarity with regulatory requirements and expectations concerning cybersecurity risk management, including FFIEC, OCC, FRB, NYDFS, HIPAA, state law, and other guidance.

• Strong analytical, problem-solving, and project management abilities.

• Experience in enhancing risk assessment methodologies and reporting practices.

🏝️ Benefits

• Competitive, thoughtfully designed, and high-quality benefits program.

• Benefits information available at https://jobs.firstcitizens.com/benefits.