data analyst

financial analyst

procurement & operations analyst Jobs in New York

procurement & operations analyst

business analyst

help desk analyst

cybersecurity analyst

Clearwaters.IT

<div>
 <ul>
 <li>
 This position is contingent upon award ***
 
 
 </li>
 </ul>
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Proactively monitor, detect, and respond to security threats across networks, systems, and cloud environments
 </li>
 <li>
 Analyze incidents, implement controls, and collaborate across teams to strengthen security posture
 </li>
 <li>
 Perform threat triage, incident investigation, and risk analysis
 </li>
 <li>
 Analyze security alerts/events for IOCs, attack patterns, emerging threats across all environments
 </li>
 <li>
 Correlate data, develop unified views of cyber risk, and enable decision-making
 </li>
 <li>
 Identify vulnerabilities, misconfigurations, and protection gaps; assess business impact
 </li>
 <li>
 Ensure alignment with regulatory and federal security standards (NIST, FISMA)
 </li>
 <li>
 Document findings, trends, and lessons learned
 </li>
 <li>
 Support continuous improvement of security operations
 
 
 </li>
 </ul>
 
 Location:
 
 Hybrid - 3 days onsite Brooklyn, NY, 2 days remote. Candidates must be able to reliably commute to the on-site location. Relocation assistance is not provided.
 
 
 
 Requirements
 
 
 
 
 Applicant must be a U.S. citizen residing in the U.S.
 
 
 
 
 This position requires obtaining a clearance through the Department of Education. Applicants must be willing to undergo a background check as part of the hiring process.
 
 
 
 
 Education:
 
 Bachelor's degree from an accredited university or 5-7 years of relevant experience.
 
 
 
 Experience:
 
 5+ years in cybersecurity (incident detection, response, SOC, cloud/infrastructure security)
 
 
 
 Certifications:
 
 (candidates MUST HAVE obtained at least one)
 
 
 <ul>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 CompTIA Security+
 </li>
 <li>
 CompTIA CySA+
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 </li>
 <li>
 GCIA (GIAC Certified Intrusion Analyst)
 </li>
 <li>
 CISA
 </li>
 <li>
 GCIH
 </li>
 <li>
 CCSP (Certified Cloud Security Professional)
 
 
 </li>
 </ul>
 
 Technical Skills:
 
 
 
 <ul>
 <li>
 SIEM (Devo/Splunk)
 </li>
 <li>
 Vulnerability scanners (Rapid7/Armis)
 </li>
 <li>
 Cloud platforms (AWS/Azure)
 </li>
 <li>
 Wireshar
 </li>
 <li>
 SQL, Python
 </li>
 <li>
 MS Power BI
 </li>
 <li>
 Microsoft Office Suite
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Health Care Plan (Medical, Dental &amp; Vision)
 </li>
 <li>
 Retirement Plan (401k, IRA)
 </li>
 <li>
 Life Insurance (Basic, Voluntary &amp; AD&amp;D)
 </li>
 <li>
 Paid Time Off (Vacation, Sick &amp; Public Holidays)
 </li>
 <li>
 Training &amp; Development
 </li>
 </ul>
</div>

Cybersecurity Analyst

Northeast Power Coordinating Council (NPCC)

<div>
 Under the direction of the Manager, Security Outreach, the Senior Cybersecurity Analyst &ndash; Infrastructure Security &amp; Outreach is responsible for advancing cybersecurity initiatives that protect critical energy infrastructure from evolving threats, while fostering collaboration and information sharing among member organizations, industry partners, and government stakeholders.
 
 
 This role supports the protection of the international, interconnected bulk power system in Northeastern North America by providing leadership, technical expertise, and program management in cyber security with a focus on Operational Technology (OT), Information Technology (IT), and Critical Infrastructure Protection (CIP).
 
 
 The position works closely with NPCC members, NPCC registered entities, the ERO Enterprise, and external partners, including governmental agencies, local, state, federal and provincial law enforcement, and industry stakeholders to enhance information sharing, threat awareness, and security posture across North America.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Develop and drive the adoption of cybersecurity best practices and standards to mature and sustain IT/OT security risk management capabilities across member organizations.
 </li>
 <li>
 Lead and provide technical and analytical support and coordination of the NPCC Task Force on Infrastructure Security and Technology and its associated working groups activities.
 </li>
 <li>
 Promote collaboration between NPCC, its members/registered entities and industry partners through organizing workshops, briefings, and training programs to enhance cybersecurity awareness, readiness and response capabilities.
 </li>
 <li>
 Lead and support cybersecurity outreach and risk assessment initiatives, including entity assist visits, by researching relevant threats, developing awareness and risk mitigation materials, and engaging stakeholders to enhance overall security awareness and preparedness.
 </li>
 <li>
 Conducting regional risk assessments, analyzing emerging threats and vulnerabilities, supporting incident response coordination, and contributing to the development of security guidelines and frameworks.
 </li>
 <li>
 Strengthen proactive outreach, communications, relationships, and intelligence sharing with key regulatory, law enforcement, and government agencies across Northeastern North America.
 </li>
 <li>
 Monitor and support the NERC Reliability and Security Technical Committee and its subgroups&rsquo; cybersecurity-related activities, as required.
 </li>
 <li>
 Collaborate with the ERO Enterprise, NERC, E-ISAC, and other partners to promote information sharing and risk mitigation.
 </li>
 <li>
 Represent NPCC in the ERO Enterprise, regional and industry security initiatives and engagements, including Grid Security Conference, GridEx and other exercises.
 </li>
 <li>
 Monitor and analyze cyber threat intelligence from sources such as E-ISAC, DHS Cybersecurity and Infrastructure Security Agency (CISA), InfraGard, and other local, state, federal, provincial law enforcement and governmental agencies.
 </li>
 <li>
 Monitor and coordinate communication on relevant critical infrastructure protection industry activities, including CISA, FERC Rulings and Notice of Proposed Rulemakings, to provide prompt notification to NPCC members of emerging issues.
 </li>
 <li>
 Participate on applicable ERO Enterprise collaboration groups and work closely with various program areas within NPCC and with external stakeholders (NERC, FERC, etc.) to support NPCC, ERO Enterprise and industry studies, efforts, and activities.
 </li>
 <li>
 Perform other duties as assigned in support of the Reliability Services Program Areas in accordance with the NPCC Long-term strategy.
 
 
 </li>
 </ul>
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Information Systems, Operational Technology, or a related field (or equivalent experience)
 </li>
 <li>
 5-10 years of experience in cybersecurity, infrastructure security, or critical infrastructure environments (electric utility preferred)
 </li>
 <li>
 Experience with IT/OT security, risk management, and/or CIP related activities
 </li>
 <li>
 Strong understanding of cybersecurity principles, threat landscapes, and risk management strategies
 </li>
 <li>
 Excellent communication, analytical, and problem-solving skills
 </li>
 <li>
 Proven ability to develop and deliver training and outreach programs
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Strong knowledge of NERC CIP standards and regulatory frameworks
 </li>
 <li>
 Experience in OT/Industrial Control Systems (ICS) environments
 </li>
 <li>
 Familiarity with cybersecurity frameworks (e.g. NIST, CIS)
 </li>
 <li>
 Experience with cloud environments and secure communications architecture
 </li>
 <li>
 Knowledge of substation networks and protocols (e.g. IEC 61850/GOOSE)
 </li>
 <li>
 Familiarity with Artificial Intelligence Risk Management Framework (NIST AI RMF 1.0) or equivalent
 </li>
 <li>
 Professional certifications such as CISSP, CISM, CISA, or SANS certifications
 </li>
 <li>
 Government or industry security clearance (e.g. DHS or equivalent)
 
 
 </li>
 </ul>
 
 Skills And Abilities
 
 
 
 <ul>
 <li>
 Excellent verbal and written communication skills
 </li>
 <li>
 Excellent interpersonal and conflict resolution skills
 </li>
 <li>
 Excellent organizational skills and attention to detail
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong supervisory and leadership skills
 </li>
 <li>
 Ability to work independently and collaboratively in a team environment
 </li>
 <li>
 Self-starter with the ability to manage multiple priorities, multitask effectively, and prioritize work in a fast-paced environment
 </li>
 <li>
 Proficient with Microsoft Office Suite or related software
 
 
 </li>
 </ul>
 Physical Demands
 
 
 <ul>
 <li>
 Ability to sit for long periods of time, ability to communicate verbally, and in writing, and ability to handle long periods of screen time.
 </li>
 <li>
 Ability to work and travel within the U.S. and Canada
 
 
 </li>
 </ul>
 EEOC and Disclaimer
 
 
 NPCC is an Equal Opportunity Employer. Employment, including the decision to hire, promote, discipline or discharge, will be solely based on competence, performance, and business needs. We prohibit discrimination on the basis of the individual&rsquo;s actual or perceived disability, protected veteran status, race, color, sex, age, national origin, religion, sexual orientation, gender, gender identity, gender expression, genetic information, marital status, citizenship, domestic violence victim status, or any other status protected under federal, state or local law.
 
 
 This job description is not intended to be all&ndash;inclusive, and the employee will also perform other reasonably related business duties as assigned by immediate supervisor and other management as required. This job description does not constitute a written or implied contract of employment.
</div>

Senior Cyber Security Analyst

<div>Vice President, Technology Auditor, Cybersecurity

At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of Vice President, Auditor to join Cybersecurity team on our Technology team within Internal Audit. This role is located in New York, New York or Pittsburgh, PA.

In this role, you&rsquo;ll make an impact in the following ways:
<ul>
<li>Support the auditing of technical policies and procedures which safeguard infrastructure, systems, files and data.</li>
<li>Understanding of Network Penetration testing.</li>
<li>Conduct application, network, and operating system security assessments</li>
<li>Understanding of alerting and monitoring of cyber tools that include but not limited to SPLUNK, CyberArk, Powerbroker, etc.</li>
<li>Support investigations and research for possible computer security related incidents.</li>
<li>Assess cloud computing and AI technologies.</li>
<li>Assess incident response team actions and procedures.</li>
<li>Assess Vulnerability Management programs</li>
<li>Assess security monitoring of clients, servers, applications, and network infrastructure activities.</li>
<li>Conduct log analysis to identify suspicious or malicious activity and anomalous behavior.</li>
<li>Represent cyber security on cross-functional IT project teams.</li>
<li>Support the analysis, design, functional review and interpretation of requirements of security related hardware and software.</li>
<li>Understand Data Protection risks and strategies</li>
<li>Apply knowledge of key regulations and industry standards such as ISO 27001&amp;2, NIST SP800-53, NIST Cybersecurity Framework, including the FFIEC Handbook.</li>
<li>Knowledge of scripting/coding such as Java, Go, C, C++, C#, Ruby, Perl, Python, PHP, HTML, Assembler languages</li>
<li>Strong communication skills (both written and verbal)</li>
</ul>
To be successful in this role, we&rsquo;re seeking the following:
<ul>
<li>Bachelor's degree or equivalent combination of education and work experience required.</li>
<li>Degree in Computer Science, Cyber Security, Accounting, or relevant critical thinking specialty such as MIS, DIS, Mathematics preferred.</li>
<li>CISA or CISSP or related certifications preferred.</li>
<li>5-10 years of total work experience preferred.</li>
<li>Prior experience in Audit or the relevant specialty area preferred.</li>
<li>Additional core skill requirements include understanding of the applied and interpretation of analytics results for Audit, critical thinking and problem solving.</li></ul> 
 
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn

 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans. 
 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $68,000 and $160,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

Vice President, Technology Auditor, Cybersecurity

KPMG

<div>Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.
KPMG is currently seeking a Senior Associate, Cyber Operations to join our Enterprise Security Services organization. This is a remote work opportunity.<h3 class="jobSectionHeader">
Responsibilities:</h3><ul><li>
Utilize your expertise in IT security, security operations, and incident response to enhance and maintain robust 24x7 cybersecurity operations, ensuring swift and effective handling of incidents and ongoing protection of organizational assets</li><li>
Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats; conduct regular assessments to identify vulnerabilities and insecure configurations and review security change requests to ensure robust protective measures</li><li>
Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms; implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified &quot;single pane of glass&quot; solution</li><li>
Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls</li><li>
Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration</li><li>
Develop work product(s) and support small projects, threat assessments, and incident investigations while managing deadlines, expectations, and contributing to staffing decisions</li><li>
Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment</li></ul><h3 class="jobSectionHeader">
Qualifications:</h3><ul><li>
Minimum three years of recent experience in cybersecurity operations with experience implementing processes and playbooks in cybersecurity monitoring and incident response activities</li><li>
Bachelor's degree from an accredited college or university is preferred; relevant certifications such as: CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900 are preferred</li><li>
Experience with scripting or automation, and ServiceNow is a plus</li><li>
Work Schedule: 10-hour shifts, Sunday-Wednesday or Wednesday-Saturday; flexibility is required to adapt to business needs</li><li>
Excellent verbal/written English communication, collaboration, analytical and presentation skills; effectively communicate risk, technical information, and host meetings effectively in a matrixed environment</li><li>
Experience with On-prem and Azure Cloud environments</li><li>
Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)</li></ul>
<div>KPMG LLP and its affiliates and subsidiaries (&ldquo;KPMG&rdquo;) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits &amp; How We Work.</div><div></div><div> 
Follow this link to obtain salary ranges by city outside of CA:</div>
https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=7473_9_25 California Salary Range: $82200 - $168200
<div><div>KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.</div><div></div><div> 
KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.</div><div></div><div> 
Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.</div></div></div>

Senior Associate, SOC Analyst

T-Mobile

<div>At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That&rsquo;s how we&rsquo;re UNSTOPPABLE for our employees!
Job Overview 
This role provides cybersecurity expertise to ensure compliance with information security standards and regulatory controls across the organization. It involves coordinating with project management, development, network engineering, testing, and support teams to maintain security and privacy. The role differentiates by serving as a liaison among cybersecurity, IT operations, engineering, and management to promote security initiatives. Success is measured by effective implementation and monitoring of security procedures and adherence to regulatory requirements. The work supports organizational security posture and protects customer and enterprise information assets from threats.
Job Responsibilities:<ul><li>
Collaborate with cross-functional teams to develop and test security procedures and regulatory controls ensuring information protection
</li><li>Conduct information security reviews of new technologies, designs, and remediation plans to identify risks and mitigation strategies
</li><li>Serve as liaison among cybersecurity, IT operations, engineering, and management to facilitate adoption of security plans and controls
</li><li>Identify security needs and implement, test, and monitor improvements to enhance information security posture
</li><li>Support the information security policy lifecycle including intake, creation, review, approval, implementation, and communication
</li><li>Contribute to security projects initiated by internal and external groups to advance organizational security objectives
</li><li>Also responsible for other duties/projects as assigned by business management as needed
</li></ul> 
Education and Work Experience:<ul><li>
Bachelor's Degree OR combination of education and experience deemed equivalent (Required)
</li><li>Acceptable areas of study include Computer Science, Information Technology or related field (Preferred)
</li><li>2-4 years Experience in info security technology or related field. (Preferred)</li></ul> 

Knowledge, Skills and Abilities:<ul><li>
Communication (Required)</li><li>
Security (Required)</li></ul> 

Licenses and Certifications:<ul><li>
Certified Information Security Manager (CISM) (Preferred)
</li><li>Certified Information Systems Security Professional (CISSP) (Preferred)
</li><li>Certified Information Systems Auditor (CISA) (Preferred)
</li></ul><ul><li>At least 18 years of age</li><li>
Legally authorized to work in the United States</li></ul> 

Travel: 
Travel Required (Yes/No): No 
 
DOT Regulated: 
DOT Regulated Position (Yes/No): No 
Safety Sensitive Position (Yes/No): No 

Base Pay Range: $73,800 - $133,200
Corporate Bonus Target: 10%
The pay range above is the general base pay range for a successful candidate in the role. The successful candidate&rsquo;s actual pay will be based on various factors, such as work location, qualifications, and experience, so the actual starting pay will vary within this range.
At T-Mobile, employees in regular, non-temporary roles are eligible for an annual bonus or periodic sales incentive or bonus, based on their role. Most Corporate employees are eligible for a year-end bonus based on company and/or individual performance and which is set at a percentage of the employee&rsquo;s eligible earnings in the prior year. Certain positions in Customer Care are eligible for monthly bonuses based on individual and/or team performance. To find the pay range for this role based on hiring location, click here.
At T-Mobile, our benefits exemplify the spirit of One Team, Together! A big part of how we care for one another is working to ensure our benefits evolve to meet the needs of our team members. Full and part-time employees have access to the same benefits when eligible. We cover all of the bases, offering medical, dental and vision insurance, a flexible spending account, 401(k), employee stock grants, employee stock purchase plan, paid time off and up to 12 paid holidays - which total about 4 weeks for new full-time employees and about 2.5 weeks for new part-time employees annually - paid parental and family leave, family building benefits, back-up care, enhanced family support, childcare subsidy, tuition assistance, college coaching, short- and long-term disability, voluntary AD&amp;D coverage, voluntary accident coverage, voluntary life insurance, voluntary disability insurance, and voluntary long-term care insurance. We don't stop there - eligible employees can also receive mobile service &amp; home internet discounts, pet insurance, and access to commuter and transit programs! To learn about T-Mobile&rsquo;s amazing benefits, check out www.t-mobilebenefits.com.
Never stop growing! 
As part of the T-Mobile team, you know the Un-carrier doesn&rsquo;t have a corporate ladder&ndash;it&rsquo;s more like a jungle gym of possibilities! We love helping our employees grow in their careers, because it&rsquo;s that shared drive to aim high that drives our business and our culture forward. By applying for this career opportunity, you&rsquo;re living our values while investing in your career growth&ndash;and we applaud it. You&rsquo;re unstoppable! 
 
T-Mobile USA, Inc. is an Equal Opportunity Employer. All decisions concerning the employment relationship will be made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, religious affiliation, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law. Discrimination, retaliation or harassment based upon any of these factors is wholly inconsistent with how we do business and will not be tolerated. 
 
Talent comes in all forms at the Un-carrier. If you are an individual with a disability and need reasonable accommodation at any point in the application or interview process, please let us know by emailing ApplicantAccommodation@t-mobile.com or calling 1-844-873-9500. Please note, this contact channel is not a means to apply for or inquire about a position and we are unable to respond to non-accommodation related requests.</div>

Analyst, Cybersecurity

<div>Director, Cybersecurity Regulatory Engagement (1LOD)

 At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of Director, Cybersecurity Governance, Risk and Controls Regulatory Engagement Lead to join our Cybersecurity team. This role can is in NYC, NY.

Role Summary:

The Director, Cybersecurity Regulatory Engagement (1LOD) is an individual contributor role within Cybersecurity Governance, Risk &amp; Controls (CGRC). Consistent with the First Line of Defense (1LOD) mandate, this role manages and executes cybersecurity regulatory engagement activities contributing to effective risk and control outcomes.

The role supports and contributes to cybersecurity regulatory engagements, including exams, inquiries, remediation activities, new regulatory guidance and regulatory requests, by coordinating inputs, supporting control alignment, and driving disciplined execution. This position reports the Director of Cyber regulatory engagement and plays a critical role in translating regulatory expectations into clear, repeatable, and well-controlled 1LOD execution.

This position requires deep regulatory judgment, and the ability to work directly with cybersecurity leadership, Engineering Controls, and risk partners in a highly regulated environment.

Primary Responsibilities &ndash; 1LOD Alignment

Regulatory Engagement Execution:
<ul>
<li>Execute end‑to‑end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and requests for information (RFIs).</li>
<li>Coordinate globally with cybersecurity process owners, control owners, and subject matter experts, to deliver accurate, consistent, and regulator‑ready responses &ndash; additionally, partner closely with Engineering Controls, Technology Risk (2LOD), Internal Audit (3LOD), and other cross‑functional stakeholders to ensure coordinated and well‑governed regulatory execution.</li>
<li>Reinforce a risk-aware culture through disciplined 1LOD execution.</li>
<li>Drive the development of high‑quality regulatory submissions by coordinating input across control owners, subject matter experts, and technical teams.</li>
<li>Reinforce direction and expectations for clear, accurate, and consistent cybersecurity regulatory responses.</li>
<li>Review, challenge, and approve key regulatory responses to ensure alignment with the firm&rsquo;s cybersecurity posture and risk appetite.</li>
<li>Contribute to a centralized regulatory response repository, leveraging AI‑enabled capabilities to improve response quality, consistency, and reuse.</li>
<li>Prepare executive‑level briefings, materials, and talking points for senior management. Including preparing materials for senior management committees and boards.</li>
<li>Partner with Engineering Controls, Risk, Compliance, Legal, and Internal Audit leadership throughout regulatory engagements</li>
<li>Provide status updates and analysis to cybersecurity leadership.</li>
<li>Provide leadership, coaching, and oversight to supporting team members.</li>
<li>Maintain accurate regulatory engagement tracking, documentation, and artifacts in accordance with CGRC governance standards.</li>
<li>Contribute to continuous improvement of regulatory engagement playbooks, job aids, and execution routines.</li>
<li>Support reporting and metrics to provide transparency into regulatory risk, themes, and engagement status.</li>
<li>Support the design, implementation, and assessment of controls addressing regulatory expectations.</li>
<li>Contribute to 1LOD risk and control taxonomies.</li>
<li>Identify control gaps, thematic issues, and systemic risks surfaced through regulatory engagements and partner with control owners to drive remediation.</li> 
<li>
</li></ul>Regulatory Response Management

Stakeholder Management &amp; Communication

Team Leadership, Process Improvement &amp; Reporting

Risk &amp; Control Alignment:

Required Qualifications:
<ul>
<li>12+ years of experience in cybersecurity, technology risk, governance, audit, controls or related technology disciplines.</li>
<li>Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.</li>
<li>Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.</li>
<li>Experience operating in a First Line of Defense (1LOD) role.</li>
<li>Demonstrated ability to operate effectively at senior leadership and executive levels.</li>
<li>Strong understanding of cybersecurity risk management, control frameworks, and regulatory expectations applicable to financial institutions.</li>
<li>Ability to synthesize complex technical and risk topics into clear, defensible regulatory narratives.</li>
<li>Exceptional written and verbal communication skills, with experience engaging regulators and senior executives.</li>
<li>Strong judgment, executive presence, and the ability to influence outcomes without direct authority.</li>
<li>Ability to manage multiple high‑stakes regulatory engagements concurrently under pressure.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $116,000 and $246,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

Director, Cybersecurity Regulatory Engagement (1LOD)

Metropolitan Commercial Bank

<div>Come Work With Us:

Metropolitan Commercial Bank (&quot;MCB&quot; or the &quot;Bank&quot;) is a New York City&ndash;based, full-service commercial bank providing tailored banking solutions to businesses, institutions, and individuals. Founded in 1999, MCB operates banking centers in Manhattan and Boro Park, Brooklyn, within New York City, as well as in Great Neck on Long Island, New York, and Lakewood, New Jersey. The Bank recently expanded to Miami, Florida with their newest Brickell banking center.

Metropolitan Commercial Bank offers a comprehensive suite of commercial, business, and personal banking products and services to small businesses, middle-market and corporate enterprises, private and public institutions, municipalities, and local government entities.

The Bank has earned national recognition for its financial performance, innovation, and strategic growth. The Bank was named one of Newsweek's Best Regional Banks in 2024 and 2025. Additionally, MCB recently received Editor's Choice recognition at the Banking Tech Awards USA for Digital Onboarding &amp; Omnichannel Banking and in 2026, the Bank earned Great Place To Work certification and received the Web Award Standard of Excellence for MCBankNY.com.

We are a client-focused organization that values technological innovation and excellence. A strong technical mindset, AI fluency, and adaptive skills are essential for our employees to effectively contribute to our mission and drive our success. We foster human&ndash;AI teaming and strong governance to ensure technology is used responsibly and in alignment with Bank policies and procedures. For more information about the Bank, please visit the Bank's website at MCBankNY.com. 


Position Summary:

Metropolitan Commercial Bank (the &quot;Bank&quot;) is seeking an Applied AI Analyst to support the design, configuration, testing, and monitoring of applied AI, Generative AI, machine learning, and agentic workflow solutions in a highly regulated banking environment. Working under the guidance of AI Scientists and in partnership with engineering, risk, and business teams, this role focuses on internal human-in-the-loop use cases such as AI-assisted loan documentation generation, fraudulent transaction detection models, policy and knowledge copilots, workflow automation, and other productivity solutions. A meaningful portion of the role is dedicated to AI solution intake and delivery support&mdash; learning new business domains, engaging business owners, preparing required documentation, and supporting vendor and risk reviews, so that solutions can be built and deployed under strict control gates and documentation standards aligned to internal and external regulations. The role emphasizes strong documentation, human oversight, privacy-by-design, cybersecurity, and disciplined lifecycle controls aligned to internal and external regulations. The role also emphasizes familiarity with Microsoft Foundry / Foundry Agent Service, approved Microsoft Copilot ecosystems, RAG architectures, and enterprise data platforms such as Snowflake.

Standard 4-day in-office requirement, 1 day remote (of your choosing)

Essential Functions &amp; Responsibilities

Applied AI solution development &amp; analysis:
<ul>
<li>Support AI Scientists in building, configuring, and testing applied AI/GenAI solutions for high-value banking use cases such as credit memo generation, policy/regulatory summarization, knowledge assistants, and internal productivity copilots.</li>
<li>Develop and refine prompts, grounding instructions, structured outputs, evaluation datasets, and Retrieval-Augmented Generation (RAG) pipelines using embeddings, vector search, document chunking, and metadata-driven retrieval.</li>
<li>Prepare and transform structured and unstructured data; assist with API integrations, notebooks, and repeatable workflows that improve quality, traceability, and analyst productivity.</li>
</ul>
Agentic workflow design &amp; orchestration:
<ul>
<li>Assist in designing and testing agentic workflows using approved enterprise platforms and frameworks, including multi-agent patterns, human-in-the-loop approvals, handoffs, and subagent / agents-as-tools designs.</li>
<li>Work with emerging interoperability patterns such as Model Context Protocol (MCP), tool / skill / plugin integration, and Agent-to-Agent (A2A) connectivity under supervision and within approved guardrails.</li>
<li>Document workflow steps, tool schemas, fallback logic, escalation paths, and safe disablement / rollback procedures for agentic and GenAI solutions.</li>
</ul>
Microsoft Foundry, Copilot, and enterprise platform enablement:
<ul>
<li>Support prototyping and evaluation in Microsoft Foundry / Foundry Agent Service and related Microsoft ecosystems (for example, Microsoft 365 Copilot) while partnering with Engineering and Data teams operating on Snowflake and other approved enterprise platforms.</li>
<li>Assist with prompt and agent configuration, retrieval integration, logging, model / tool versioning, and operational runbooks.</li>
</ul>
Evaluation, testing, and monitoring:
<ul>
<li>Create and execute test cases for accuracy, groundedness, hallucination, task completion, retrieval quality, bias/fairness, and basic adversarial or prompt-injection scenarios; escalate issues promptly.</li>
<li>Track KPIs/KRIs, output quality, drift indicators, and user feedback; maintain evidence needed for pilot reviews, production monitoring, and periodic reassessment.</li>
</ul>
AI governance, intake documentation, and cybersecurity/privacy controls:
<ul>
<li>Support AI use-case intake and governance processes by preparing required documentation (e.g., AI intake forms, model/system inventories, change-control artifacts, and audit-ready evidence packs) aligned to MCB's Trustworthy &amp; Responsible AI Principles and internal approval processes.</li>
<li>Learn domain and process context for new use cases by speaking with business owners and control partners; translate requirements into clear problem statements, data needs, user journeys, control gates, and documentation required to comply with internal and external regulations.</li>
<li>Support third-party / AI vendor due diligence by collecting and organizing evidence, reviewing vendor documentation, and helping risk-tier AI vendors and solutions in partnership with Third-Party Risk and Cyber/IT; act as an AI subject matter expert in providing an understanding of AI-specific risks.</li>
<li>Apply privacy-by-design, data minimization, access-control, and secure prompt/data handling practices; follow approved tooling and build standards.</li>
</ul>
Cross-functional partnership and continuous learning:
<ul>
<li>Communicate findings, limitations, and recommendations clearly to AI Scientists, managers, control partners (Model Risk, Compliance/Legal, Cyber/IT, Data Privacy), and business stakeholders; incorporate feedback quickly and accurately.</li>
<li>Contribute to playbooks, standard operating procedures, and reusable templates for prompts, evaluations, agent patterns, and workflow controls.</li>
</ul>
Innovation and best practices:
<ul>
<li>Stay current on practical applied-AI methods&mdash;including RAG, evaluation frameworks, agentic workflow design, MCP, A2A, and Microsoft Foundry capabilities&mdash;and recommend fit-for-purpose uses under established control gates.</li>
<li>Demonstrate sound judgment, curiosity, and willingness to learn from senior AI Scientists while promoting responsible AI, reproducibility, and disciplined execution.</li>
</ul>
Qualifications &amp; Skills:
<ul>
<li>2+ years of work experience.</li>
<li>Bachelor's degree in Computer Science, Data Science, Statistics, Engineering, Information Systems, Mathematics, or a related field is preferred. Relevant internships, apprenticeships, or comparable hands-on AI, analytics, or automation project experience will be considered.</li>
<li>Working knowledge of Python, SQL, notebooks, REST APIs, JSON/YAML, and version control (e.g., Git) for data analysis and AI workflow support.</li>
<li>Understanding of traditional machine learning model development and lifecycle concepts, including model training, data leakage prevention, testing/validation, monitoring, and common performance metrics for classification and regression.</li>
<li>Familiarity with LLM application patterns, including prompt engineering, structured outputs, function/tool calling, Retrieval-Augmented Generation (RAG), embeddings, and vector search.</li>
<li>Familiarity with Microsoft Foundry (including Foundry Agent Service), Microsoft 365 Copilot / Copilot Studio concepts, and approved enterprise data/AI platforms such as Snowflake.</li>
<li>Understanding of agentic workflow concepts such as MCP servers/tools, skills/plugins, subagents or agents-as-tools, handoffs, human-in-the-loop controls, and A2A integration patterns.</li>
<li>Ability to test and evaluate AI outputs for accuracy, groundedness, hallucination, retrieval quality, bias/fairness, and basic security misuse scenarios.</li>
<li>Working knowledge of model and data governance concepts, including documentation, monitoring, change control, inventories, audit trails, and three-lines-of-defense oversight in a regulated environment.</li>
<li>Strong written and verbal communication skills; ability to turn technical findings into clear summaries, test evidence, and action items for business and risk stakeholders.</li>
<li>Analytical, organized, and adaptable mindset; ability to learn quickly, manage multiple workstreams, and balance innovation with risk discipline.</li>
</ul>
Preferred Qualifications &amp; Skills
<ul>
<li>Financial services exposure in fraud, AML/KYC/CDD/EDD, underwriting, commercial banking, treasury, policy governance, or contact center analytics.</li>
<li>Hands-on experience with Microsoft Foundry / Foundry Agent Service, Azure AI Search or equivalent retrieval tooling, M365 Copilot / Copilot Studio, Snowflake, or similar enterprise AI platforms is a plus.</li>
<li>Experience with RAG architectures, vector databases / vector search, document chunking, metadata extraction, OCR/document understanding, and prompt engineering.</li>
<li>Exposure to agentic workflow patterns such as MCP tool integration, skills/plugins, handoffs, subagents, A2A, and evaluation frameworks for task completion and tool-call quality.</li>
<li>Familiarity with LangChain, Semantic Kernel, LangGraph, Microsoft Agent Framework, or similar orchestration libraries/frameworks is a plus.</li>
<li>Awareness of external regulations including SR 11-7, SR 23-4, AI use-case intake / inventory processes, privacy, cybersecurity, and third-party risk expectations in a regulated environment.</li>
<li>Ability to work in a constantly evolving environment.</li>
<li>Must have excellent written and verbal communication skills.</li>
<li>Demonstrate analytical, troubleshooting, and problem-solving skills.</li>
<li>The ability to learn new technologies quickly.</li>
<li>Self-directed individual with strong organizational and communication skills.</li>
<li>Ability to synthesize multiple sources of information with an understanding of the bigger picture needs and operations of the Bank.</li>
<li>Collaborative team player who can find practical solutions in a dynamic work environment.</li>
<li>Ability to handle ambiguity, manage multiple tasks at once, and shift effectively between priorities.</li></ul> 


Potential Salary: $120,000 - $150,000 annually

This salary range reflects base wages and does not include benefits, bonus, or incentive pay. Salary bands are purposefully wide ranging to encompass the different factors considered in determining where a candidate falls in the range, including but not limited to, seniority, performance, experience, education, and any other legitimate, non-discriminatory factor permitted by law. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed here.

Metropolitan Commercial Bank provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.</div>

Applied AI Analyst

Explore 160+ Cybersecurity analyst in New York this April. Find roles across top companies and apply now to boost your career.