Senior Cybersecurity Risk Analyst (in-office)

About the role

Dime Community Bank is hiring a Senior Cybersecurity Risk Analyst (SCRA) at its Headquarters in Hauppauge, Long Island. The SCRA assists the Chief Information Security Officer (CISO) in developing, maintaining, and monitoring the bank’s Cybersecurity and Information Security Programs to protect the confidentiality, integrity, and availability of information systems. The role serves as a technical expert on information security policy, manages the Information Security Program, and works with the CISO and Chief Risk Officer (CRO) to develop, implement, and maintain an effective cybersecurity risk framework.

Responsibilities

• Work with IT, Internal Audit, Risk Management, and business lines to plan, coordinate, and develop recommendations for information security policies and procedures.
• Ensure procedures and rules of use for information systems comply with Dime’s information security policies.
• Perform periodic reviews to verify compliance with security policies and procedures and develop improvement recommendations.
• Collaborate with business lines, vendors, and systems professionals to identify solutions that advance the bank’s information security goals.
• Coordinate and assist in developing and maintaining policies, standards, processes, and procedures to assess, monitor, report, escalate, and remediate information security risks and related compliance issues.
• Ensure appropriate risk assessments are performed and existing controls are periodically tested for effectiveness.
• Use metrics to measure, monitor, and report on the effectiveness and efficiency of information security controls and compliance with policies.
• Conduct and report results of the annual information security risk assessment.
• Maintain the information security risk register and ensure compliance issues and variances are resolved timely.
• Develop and deliver activities and programs that positively influence information security culture and staff behavior, including education and awareness initiatives.
• Present program status and updates on major deliverables to Senior Management and the Board of Directors.
• Engage and influence all areas of Dime to align initiatives with the information security program.
• Periodically conduct training and awareness campaigns for new and existing staff.
• Act as Information Security’s primary point of contact for internal and external audits and examinations, coordinating evidence gathering.
• Monitor the evolving regulatory environment to identify and prepare for new and changing laws, guidance, and frameworks.

Qualifications

• Bachelor’s degree and minimum three years’ related experience and/or training; or equivalent combination of education and experience.
• Knowledge of banking operations and bank policy and procedure development.
• Knowledge of financial services regulatory requirements (FFIEC, GLBA, NYSDFS) and industry standards (NIST, ISO 27001/2).
• CISSP or CISM (or comparable certification) preferred.
• Experience administering GRC software.
• Experience with Security Awareness Training and Testing Platforms.
• Exposure to enterprise security tools preferred (e.g., SIEM, vulnerability scanners, firewalls, identity governance and administration).
• Demonstrated understanding of technological trends in information security, risk management, and business continuity.
• Demonstrated experience in administering and managing the information security function, including FFIEC and DFS regulations and audits.
• High regard for quality and risk management practices.
• Excellent oral and written communication skills.
• Ability to work outside of normal business hours on occasion.
• Superior knowledge of Microsoft Office products.

Pay

Salary commensurate with experience, ranging from $85,000 to $105,000 annually. Exact compensation may vary based on relevant experience, skills, education, training, licensure, certifications, and location.

Schedule

This is an in-office role located at Dime Community Bank’s Headquarters in Hauppauge, Long Island. The position is not remote. Dime does not provide relocation assistance or visa sponsorship (now or in the future).