Cyber Security Risk Assessment Jobs in New York (NOW HIRING)

Cyber Security Risk Office (CSSRO)
As an Analyst within DTCC's Cyber Security Risk Office (CSRO), you will help support the firm's cyber security risk management objectives by contributing to activities that strengthen cyber governance, oversight, and risk management practices across the organization. Operating as a Second Line of Defense function, CSRO provides independent oversight, risk guidance, and credible challenge to help ensure cyber security risks are effectively identified, assessed, governed, and managed.

In this role, you will collaborate with technology, security, risk, and business stakeholders across the enterprise to support initiatives that enhance cyber resilience, promote sound risk management practices, and strengthen the overall security posture of the organization. Your work will contribute to maintaining stakeholder confidence and supporting DTCC's mission as critical infrastructure for the global financial markets.

At DTCC, we help power the global financial markets by providing critical infrastructure that supports the safe and efficient processing of securities transactions. In this role, you will learn how your business area contributes to that broader mission while building practical skills through meaningful work, coaching, and structured development.

EDGE is DTCC's 18-month early-career development program for recent graduates. The program combines hands-on business experience, structured learning, mentorship, networking, and regular feedback to help analysts build technical, functional, and leadership capabilities.

• A structured onboarding experience, including Welcome Week and program orientation.

• Hands-on experience through meaningful work aligned to business priorities.

• Exposure across the team through projects, shadowing, and stretch assignments.

• Monthly learning sessions, business education, professional development, and opportunities to hear from leaders and subject matter experts.

• Regular feedback, including a 90-day feedback and assessment milestone, manager coaching, and program check-ins.

• Mentorship, networking, and opportunities to build relationships across DTCC.

Analysts in this role may gain exposure to a broad range of cyber security and technology risk disciplines, including cyber governance, risk assessment, control frameworks, security standards, compliance monitoring, control evaluation, risk reporting, and oversight processes. The role provides opportunities to learn how cyber security requirements and controls are implemented across enterprise technologies, while developing an understanding of how technology, security, risk management, and regulatory expectations intersect within a complex financial services environment.

Role Responsibilities

• Support cyber security risk management, governance, and oversight activities that help strengthen DTCC's security posture and risk management capabilities.

• Analyze information, evidence, metrics, and documentation to support risk assessments, control evaluations, governance processes, and management reporting.

• Partner with technology, security, risk, and business stakeholders to identify, assess, monitor, and communicate cyber security risks and remediation activities.

• Research emerging technologies, cyber threats, industry practices, and evolving risks and provide insights that support informed decision-making.

• Contribute to reporting, presentations, process improvement initiatives, and cross-functional projects that enhance cyber security programs, governance, and operational effectiveness.

• Pursuing a bachelor's degree in Cyber Security, Information Technology, Risk Management, Business, or any other related field.

• Expected graduation date: May 2027

• Minimum GPA: 3.2

• Authorization to work permanently in the United States without current or future sponsorship.

• Internship, project, research, student organization, volunteer, or leadership experience related to the role.

• Interest in financial services and how business, technology, operations, risk, and regulation connect.

• Curiosity and a willingness to learn in a complex industry.

• Strong analytical thinking, problem-solving, and attention to detail.

• Clear written and verbal communication.

• Collaboration, accountability, adaptability, and follow-through.

• Ability to ask thoughtful questions, use feedback, and connect your work to team goals.

• Competitive compensation, including base pay and annual incentive opportunities, where applicable.

• Comprehensive health, wellness, retirement, and paid time off benefits based on location and eligibility.

• Hybrid work model: 3 days in office and 2 days remote, based on team schedule.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.