ZipRecruiter

Log In

1

Security Risk Jobs in New York (NOW HIRING)

M0

Head of Security & Risk

New York, NY · On-site +1

The information security and risk posture we establish in the next 12 months will define how M0 is perceived by partners, regulators, and institutional investors for years to come. About the Role ...

M0

Head of Security & Risk

New York, NY

The information security and risk posture we establish in the next 12 months will define how M0 is perceived by partners, regulators, and institutional investors for years to come. About the Role ...

next page

Showing results 1-20

All JobsSecurity Risk JobsSecurity Risk Jobs in New York

Security Risk information

See New York salary details

$11

$55

$76

How much do security risk jobs pay per hour?

As of Aug 24, 2026, the average hourly pay for security risk in New York is $55.15, according to ZipRecruiter salary data. Most workers in this role earn between $44.71 and $65.77 per hour, depending on experience, location, and employer.

What is a security risk professional?

Security risk professionals are experts who identify, assess, and mitigate potential threats to an organization's physical and digital assets. Their responsibilities include conducting risk assessments, developing security policies, and ensuring compliance with regulations. They work to minimize vulnerabilities that could lead to data breaches, theft, or other security incidents. These professionals may also train staff on security best practices and respond to security incidents as they arise.

What are the key skills and qualifications needed to thrive as a security risk analyst, and why are they important?

To thrive as a Security Risk Analyst, you need a strong understanding of information security principles, risk assessment methodologies, and relevant regulations, typically supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), vulnerability assessment tools, and certifications like CISSP or CISM are highly valued. Analytical thinking, attention to detail, and effective communication skills help convey risk findings and collaborate with diverse stakeholders. These competencies are crucial for identifying threats, minimizing vulnerabilities, and ensuring organizational resilience against security risks.

What are some common challenges faced by security risk professionals, and how can they overcome them?

Security Risk professionals often face challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and gaining buy-in from stakeholders for risk mitigation strategies. To overcome these, it’s essential to engage in continuous learning, build strong cross-functional relationships, and communicate the value of security initiatives in business terms. Developing robust reporting and assessment processes can also help identify risks early and ensure effective collaboration across departments.

What is the difference between Security Risk vs Security Analyst?

AspectSecurity RiskSecurity Analyst
Required CredentialsKnowledge of security principles, risk assessment skillsCertifications like CompTIA Security+, CISSP, or CISA
Work EnvironmentIdentifying potential threats, assessing vulnerabilitiesMonitoring security systems, analyzing security data
Employer & Industry UsageUsed across industries to identify threatsCommonly employed in cybersecurity teams
Search & Comparison IntentUnderstanding risk factors and mitigationAnalyzing security incidents and improving defenses

Security Risk involves identifying and assessing potential threats to an organization, focusing on risk management strategies. Security Analysts, on the other hand, monitor and analyze security systems to detect and respond to threats. While both roles require security knowledge and certifications, Security Risk professionals focus on risk assessment, whereas Security Analysts are more involved in operational security monitoring.

What is a security risk officer?

A security risk officer is a professional responsible for identifying, assessing, and mitigating security risks within an organization. They develop security policies, conduct risk assessments, and implement measures to protect assets, often requiring knowledge of cybersecurity, physical security, and relevant regulations. Certifications like CISSP or CISM can enhance their qualifications.

What are popular job titles related to Security Risk jobs in New York?

For Security Risk jobs in New York, the most frequently searched job titles are:

What job categories do people searching Security Risk jobs in New York look for?

The top searched job categories for Security Risk jobs in New York are:

What cities in New York are hiring for Security Risk jobs?

Cities in New York with the most Security Risk job openings:

Security Risk jobs near you
Infographic showing various Security Risk job openings in New York as of August 2026, with employment types broken down into 85% Full Time, 13% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $114,707 per year, or $55.1 per hour.

Technology and Information Security Risk Specialist

Manhattan, NY • On-site

IDBNY
See more jobs at IDBNYexternal

$160K - $180K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 17 days ago

Job description

Technology and Information Security Risk Specialist
Vice President | Second Line of Defense
Position Summary
The Technology and Information Security Risk Specialist provides independent Second Line oversight of the Bank's technology infrastructure, information security, and cyber risk programs. The role evaluates whether risks are appropriately identified, assessed, escalated, reported, and remediated through a practical, connected, and risk-based approach.
This position strengthens the Bank's risk posture by providing effective review and challenge, supporting risk assessments and control reviews, and connecting technology and information security risk themes to operational risk, vendor risk, change management, resilience, data management, and broader ERM processes.
The role requires technical credibility, sound judgment, strong communication skills, and the ability to work effectively with First Line teams, senior leaders, auditors, regulators, Head Office, and executive stakeholders while maintaining Second Line independence.
Core Responsibilities
  • Second Line Oversight and Challenge - Provide independent oversight, ongoing monitoring, and effective challenge of First Line technology infrastructure, information security, and cyber risk programs, including governance, controls, execution, reporting, and residual risk.
    • Risk Assessments and Control Reviews - Lead and review risk assessments, RCSAs, control testing, issues, remediation plans, KRIs/KPIs, policies, procedures, evidence, and supporting analysis.
    • Framework and Program Connectivity - Develop and enhance the Second Line framework for technology and information security risk and assess connectivity to operational risk, vendor risk, change management, resilience, data management, and enterprise controls.
    • Project, Change, and Emerging Technology Risk - Identify, assess, and report risks related to significant projects, new activities, vendor relationships, control changes, AI, automation, and other emerging technologies.
    • Reporting and Enterprise Risk Support - Develop KRIs/KPIs, prepare clear materials for management, committee, audit, board, and regulatory discussions, and provide input for ICAAP, risk appetite, risk profile assessments, and ERM routines.
    • Stakeholder Engagement - Coordinate with audit, regulators, Head Office, First Line technology and security teams, the CISO function, IT Operations Risk, Vendor Management, business lines, and executive stakeholders while maintaining Second Line independence.
    • Training and Work Product - Support targeted risk awareness efforts and produce clear, defensible work that connects facts, risks, controls, dependencies, and conclusions.

Qualifications
  • Experience and Education - 10+ years in technology infrastructure, information security, cyber risk, IT controls, or related oversight functions, preferably within a regulated financial institution; bachelor's degree in a related technical or risk discipline preferred.
  • Technical and Regulatory Knowledge - Strong knowledge of technology, cybersecurity, and control environments, including cloud, applications, infrastructure, access management, resilience, NIST, NYDFS Part 500, FFIEC guidance, and related risk expectations.
  • Risk Assessment and Oversight - Skilled in risk assessments, control reviews, issue management, remediation tracking, risk reporting, governance routines, and effective challenge across First, Second, and Third Line stakeholders.
  • Enterprise and Emerging Risk Connectivity - Ability to connect technology and information security risk themes to ERM processes, including ICAAP, risk appetite, risk profile assessments, enterprise reporting, AI, automation, and other emerging technology risks.
  • Execution and Tools - Experience using GRC tools and managing technology or security-related projects, technical teams, and cross-functional workstreams with clear ownership, deadlines, reporting, and follow-through.
  • Communication and Judgment - Strong analytical, writing, documentation, executive communication, professional judgment, independence, and ability to produce clear, defensible work for senior management, committee, audit, or regulatory review.
  • Preferred Certifications - CISSP, CISM, CISA, CRISC, CEH, or equivalent certifications are strongly preferred.

Reporting Structure
  • Reporting Line - Reports to the Head of Risk Strategy and Supervisory Oversight.
  • Key Partners - Partners with Risk, IT, Information Security, Compliance, Audit, Operations, Vendor Management, Head Office, and business stakeholders.
  • Role Focus - Provides independent 2LOD oversight, supports effective review and challenge, and connects technology and information security risk considerations to the Bank's broader risk framework

CompensationThe expected annual salary for this position is between $160,000 and $180,000 at the start of employment. A salary offer is determined on an individualized basis, taking into consideration factors such as an individual's skills and experience. In addition to base salary, our total rewards package also includes eligibility for an annual bonus, medical, pharmacy, dental, and vision plans, life and disability insurance, employee wellness program, retirement and savings plans with employer contributions, generous holiday and paid time off schedules, parental leave, and tuition reimbursement.
Additional Information
The Bank Will Make Reasonable Accommodations To The Following Employees To Allow Them To Perform The Essential Functions Of Their Position, Except Where Doing So Would Result In Undue Hardship To The Bank
  • Those with a known mental or physical disability.
  • Pregnant individuals and/or individuals with pregnancy or childbirth-related medical conditions.
  • Victims of domestic violence, sex offenses or stalking.
  • Employees with religious observance and practice obligations.

Any employee who believes he or she needs an accommodation for any of the above reasons should contact their supervisor or a member of Human Resources to request such an accommodation. In each case, the Bank will engage in a good faith written or oral dialogue concerning the individual's accommodation needs; potential accommodations that may address the individual's accommodation needs, including alternatives to a requested accommodation; and the difficulties that such potential accommodations may pose for the employer.
The Bank retains the ultimate discretion to choose the appropriate reasonable accommodation. Upon reaching a final determination at the conclusion of the cooperative dialogue, the Bank will provide the requesting individual with a written final determination identifying any accommodation granted or denied. In addition, the Bank will maintain any information regarding the employee's request and status in the strictest confidence, except as requested by the employee, as required on a need-to-know basis or as otherwise required by law.
DisclaimerThe above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.
All your information will be kept confidential according to EEO guidelines.
We are operating on a Hybrid schedule.NO AGENCIES PLEASE.IDB BANK, INCLUDING ITS SUBSIDIARIES AND DIVISIONS, PROVIDES EQUAL EMPLOYMENT OPPORTUNITIES TO ALL EMPLOYEES AND APPLICANTS FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, NATIONAL ORIGIN, AGE, DISABILITY, GENETIC STATUS, CITIZENSHIP STATUS, MARITAL STATUS, MILITARY OR VETERAN STATUS, CURRENT UNEMPLOYMENT OR ANY OTHER LEGALLY PROTECTED CATEGORY IN ACCORDANCE WITH APPLICABLE FEDERAL, STATE AND LOCAL LAW. NOTHING IN THIS SITE CONSTITUTES A PROMISE OR OFFER OF EMPLOYMENT.
Kindly review our Privacy Notice and GLBA Consumer Privacy Notice.

Apply