Manager of Enterprise Cyber Risk Management at Federal Reserve Bank (FRB) in New York City, New York

Job Description:

Working at the Federal Reserve Bank of New York positions you at the center of the financial world with a unique perspective on national and international markets and economies. You will work in an environment with a diverse group of experienced professionals to foster and support the safety, soundness, and vitality of our economic and financial systems. It is a challenge that demands the skills of a financial service professional and the intelligence an academic-all combined with a passion for public service.

What we do:

Information Security New York (ISNY) develops and executes a information security program that promotes resiliency by identifying and mitigating cyber risks and threats through risk-based consultation, advice, and direction for controls, designs, and investments for the entire Bank.

Your role as Manager of Enterprise Cyber Risk Management:

• 
  Lead the Enterprise Cyber risk management practices, evaluate related information security controls including first line review, challenge, and quality assurance, and analyze information (e.g., risk assessments, risk identification, technical and process vulnerabilities) to identify effectiveness of mitigation and remediation strategies.
  
  


• 
  Advise the Group's departments on the design, implementation, and monitoring of information security controls; the identification of vulnerabilities; and the development of remediation plans to enhance the resiliency posture.
  
  


• 
  Evaluate reports (risk profile, risk package, metric dashboard) on business risks to identify themes or trends and promote information sharing and transparency of material risks and control issues.
  
  


• 
  Identify, measure, monitor, report on security risks within the Group's information technology domain, and assess the adequacy of controls including information security, cyber security, Software Security and Secure SDLC.
  
  


• 
  Understanding of and ability to apply risk management and control frameworks (NIST 800-53) and industry best practices. Understanding of vulnerability risk impact on important goals and processes; ability to link risk management programs to inform business strategies
  
  


• 
  Support staff development; ensure talent is deployed to maximize results, including:
  
  


• 
  Establish goals for the staff to support the Function, Group and Bank goals. Provide guidance to staff to develop reports on risk reports and deliverables.
  
  


• 
  You will report to Head of Risk Assessment and Management.