Skip to content

Open nowFirst seen 6 days ago

Cybersecurity & Technology Risk Compliance Analyst Tampa or Coppell, TX

ESRhealthcare and EXEC STAFF RECRUITERS1,405 open roles

Where
Tampa, Florida, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity & Technology Risk Compliance Analyst Tampa or Coppell, TXESRhealthcare and EXEC STAFF RECRUITERS · Tampa, Florida, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ESRhealthcare and EXEC STAFF RECRUITERS's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: first seen 6 days ago

The posting

CISA, CISM, CISSP, CRISC or equivalent certification, cybersecurity and technology risk management, Compliance Analyst

Experience level: Mid-senior Experience required: 6 Years Education level: Bachelors degree Job function: Information Technology Industry: Financial Services Pay rate : Total position: 1 Visa sponsorship eligibility: No

Need Candidates only from Financial Services Industry ~!

Job Locations : Tampa, FL Or Coppell, TX (Coppell is preference)

Job Summary/Basic Function

Cybersecurity & Technology Risk Management Compliance Analyst ensures DTCC is complying with several cybersecurity regulatory requirements, cybersecurity industry standards, frameworks, and best practices. Additional staffing is required to assist with the identification, development and ongoing mapping of internal cybersecurity and technology policies, procedures, and controls that demonstrate compliance with cybersecurity regulatory requirements and work with stakeholders to address gaps and inconsistencies. This function provides transparency into the cybersecurity laws and regulations that govern DTCC policies and facilitates mapping of those requirements to controls. In addition, the function monitors and organizes existing controls and their alignment in the enterprise GRC tool. The ideal candidate has done related work for at least five years and has a thorough knowledge of technology controls (IT and cyber) including how they are executed in todays IT threat landscape. The incumbent should have a strong understanding of testing cyber security methodologies, frameworks, and regulations in the financial services sector.

Principal Responsibilities:

Perform mapping of regulatory requirements to policies, procedures, industry standards, frameworks, and existing controls

Review policies and procedures that demonstrate compliance with regulatory requirements and work to address gaps and inconsistencies.

Continue to develop and maintain a comprehensive library of applicable cybersecurity laws and regulations, as well as requirements and resulting controls.

Monitor regulatory trends, guidance and new regulations which impact cybersecurity and require enhancements to the existing control framework.

Prepare reports on the status of the program to appropriate governance structure(s) and senior management.

Support the facilitation of impact assessments to evaluate new or changing regulations and readiness for compliance.

Evaluate new initiatives and business ventures to identify and evaluate compliance requirements and readiness.

Develop action plans for development and enhancement of cybersecurity controls and provide ongoing support and monitoring of the implementation of those controls.

Evaluate policies and procedures to identify and address any compliance gaps or inconsistencies within the control framework and alignment with applicable regulations.

Understand cyber and IT best practices including knowledge of frameworks, guidelines, and regulations (i.e., NIST Cybersecurity Framework, FFIEC, NYSDFS)

Ensure cybersecurity and technology risk management meets all industry regulations, standards, and compliance requirements.

Qualifications

5+ years experience; prior experience in risk management, legal, compliance or auditing preferred

Bachelor's degree preferred; advanced degree and/or certification a plus

College Degree in Business Management / Computer Science [or related field preferred]

CISA, CISM, CISSP, CRISC or equivalent certification

Specific Qualifications

Proficient in PowerPoint, Excel and Word

Knowledge of financial services laws and regulations, particularly in the securities markets

Experience working at or with financial services regulators (e.g. SEC, FRB, NYSDFS, CFTC, ESMA, etc.) is highly desirable

Previous audit experience preferred.

Familiarity with ISO/IEC 27001/27002:2013, NIST Cybersecurity Framework, NIST Special Publication (SP) 800-53 or other cyber, technology, financial services guidelines, frameworks and regulations is required.

Expert writing skills to support thorough documentation and communication of information security principles.

Intermediate level experience with Microsoft Excel. Has ability to create metrics

Understand the concepts of information technology risk and the different elements required that mitigate risk.

Knowledge of basic compliance principles and standards, including industry best practices and compliance controls

Proven knowledge of technical infrastructure, networks, databases and systems and how they affect an organization's cybersecurity and technology risk

Ability to work efficiently and independently with minimal supervision (i.e., self-motivated, proactive, and willing to stretch to meet important deadlines).

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ESRhealthcare and EXEC STAFF RECRUITERS's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on ESRhealthcare and EXEC STAFF RECRUITERS's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    ESRhealthcare and EXEC STAFF RECRUITERS's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.