I'm looking for Cyber Security Analyst roles in New York, specifically focusing on positions that require 5+ years of experience, are full-time, and involve skills in cybersecurity analytics and regulatory compliance frameworks, especially NIST and PCI-DSS.

Okay, I've searched for Cyber Security Analyst roles in New York that require 5+ years of experience, are full-time, and involve skills in cybersecurity analytics and regulatory compliance frameworks such as NIST and PCI-DSS. I have found 45 positions that match these criteria. You can explore them now.

Cyber Security Analyst

New York, NY

5 years + Experience

Full Time

cybersecurity analytics

regulatory compliance frameworks

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Cyber Security Analyst - Associate role at SMBC is pivotal for enhancing the organization’s Cyber Resilience and Operational Resiliency program. The primary responsibility lies in developing and automating control processes related to cybersecurity, thus ensuring a well-rounded defense against potential threats. Success in this role entails not only technical proficiency but also a deep understanding of regulatory compliance frameworks like NIST 800-53r5 and PCI-DSS, which will guide the candidate in conducting risk assessments and evaluations across various technology layers, including AI and Cloud. Candidates must possess strong analytical skills, enabling them to drive scalable, data-informed improvements and create impactful dashboards for near-real-time visibility into risks. The role requires effective collaboration across diverse teams, demanding not just technical skills but also strong communication capabilities. Performance metrics will likely focus on the maturation of the cybersecurity program, effectiveness of automated processes, and improvements in cybersecurity compliance and risk posture, indicating that the ideal candidate should proactively engage in metrics tracking and process enhancement efforts.

Company Analysis:

SMBC is a significant player in the global financial sector with a prestigious 400-year history, which signals stability and depth in expertise. The company’s extensive reach and diverse client base indicate a rich organizational complexity that the Cyber Security Analyst will need to navigate. The emphasis on technology and data-driven solutions aligns with contemporary financial service expectations. Company culture likely prioritizes innovation and resilience, needing employees who are both adaptable and collaborative. Given the company operates within a hybrid work model, there is an implied trust in employees to manage their workdays effectively, while also maintaining compliance with industry standards. This role's connection to strategic focus areas—such as improving resilience in the face of rapidly evolving technology—suggests that the analyst will be instrumental in driving initiatives that enhance SMBC's overall risk management and operational stability, illustrating a clear tie between this position and the company’s broader objectives of growth and security.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Tell me about a time when you had to conduct a risk assessment for a new technology. What steps did you take?
Describe a project where you had to automate a complex process. What challenges did you face, and how did you overcome them?
Can you give an example of how you collaborated with cross-functional teams to achieve a cybersecurity goal?
How would you approach tracking and optimizing performance metrics related to cybersecurity?
What steps would you take to ensure compliance with NIST 800-53r5 in a newly deployed system?
How do you prioritize which cybersecurity controls to automate in your workflows?
Imagine you are tasked with improving the cyber resilience metrics for your team. How would you approach this project?
What would you do if you discovered that a critical vulnerability was not being addressed by your team?
Why are you interested in working at SMBC specifically, and how do you see your role contributing to our mission?
How do your values align with the emphasis SMBC places on resilience and innovation in technology?
What aspect of the Cyber Security Analyst role excites you the most, and how do you believe you can contribute?
What questions can you ask to better understand how SMBC's hybrid work model works in practice for this role?
What specific methodologies or tools do you prefer for monitoring cybersecurity compliance, and why?

Job Details

Overview Company

Cyber Security Analyst - Associate

$97k/y-$154k/y

Lensa

a day ago

Highlight

HybridFull-time5+ yearsMid

Summary

SMBC is seeking a Cyber Security Analyst - Associate to join their team in New York, NY. The role involves supporting the Cyber Resilience and Operational Resiliency program, focusing on developing and automating control processes and enhancing cyber defense.

About the Role

As a Cyber Security Analyst - Associate, you will lead or support cybersecurity risk and control assessments across various technology layers. You will contribute to the maturation of a new cyber operations and resiliency program by driving scalable, data-informed improvements. Your responsibilities include developing automated dashboards, supporting project management efforts, and ensuring compliance with regulatory standards.

About You

Required:

5+ years of experience in SNOW workflows, automation, dashboards and compliance tracking, cybersecurity analytics, or cyber risk/compliance roles.
Experience conducting cybersecurity assessments and analyzing risk for emerging technologies like AI, Cloud, Quantum.
Working knowledge of NIST 800-53r5, FFIEC, NYDFS Cybersecurity Regulation, PCI-DSS.
Intermediate to advanced skills in Power BI, including DAX, data modeling, and integration.
Proficiency with SQL, Excel, Python, or R for manipulation and automation.
Strong collaboration and communication skills for working across technical, audit, and business functions.

Preferred:

Experience integrating ServiceNow and Power BI or other BI platforms.
Familiarity with GRC platforms, SOAR Tools, or cloud-native security solutions.
Exposure to key cybersecurity domains: threat modeling, vulnerability management, incident response, threat intel, and security architecture.
Understanding of operational resiliency and risk-based frameworks.
Certificates such as CISSP, CISA, CRISC or AI/machine learning credentials.

Benefits

Competitive compensation with a salary range of $97k–$154k.
Eligibility for an annual discretionary incentive award.
Comprehensive benefits package.
Hybrid workforce model with opportunities to work from home and office.

Lensa

What if we could take the search out of job search? This is the question Lensa has been answering since launching in San Francisco, California in August 2016. Using machine learning, we instantly provide companies with candidates and match professionals with positions that fit their skills, goals, personalities, and needs. How does it work? Lensa applies complex algorithms that identify the skills needed to succeed on a given job. Candidates can play computer games that assess their work style, thus gaining insight into their strengths while unlocking career opportunities. The result: job search that puts people first while reducing the time and cost of talent acquisition.

Lensa passed 10 million job seeker registrations in 2019, making the com- pany one of the premier career platforms.

With teams in multiple U.S. locations and a 60-strong crew of developers and data scientists at its R & D headquarters in Europe, Lensa is working every day to share its transformative career technology with the world.

New York, NY