Senior Associate - Cyber Security Risk and Control

 

Location Designation: Hybrid - 3 days per quarter 

 

 

 

As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting-edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth — driving the company's success.

 

Role Overview:
The Cybersecurity Risk and Controls Senior Associate will play a key role in strengthening New York Life’s cybersecurity posture by ensuring our security processes and controls align with our enterprise risk appetite and regulatory requirements. The ideal candidate will have a strong background in information security governance, risk management, and controls oversight.

What You’ll Do:
• Governance & Oversight
o Work closely with Technology Risk to support the design and execution of cybersecurity governance processes, including policy reviews, risk reporting, and control testing.
o Partner with Technology teams to ensure cybersecurity risks are identified, documented, and mitigated appropriately.
• Audit & Compliance Support
o Coordinate and support internal audits, regulatory exams, and external assessments related to cybersecurity.
o Prepare documentation and evidence for auditors, regulators, and senior management.
• Continuous Improvement
o Contribute to process enhancements, automation, and control rationalization efforts to improve cybersecurity controls.
o Identify opportunities to leverage AI and automation in risk monitoring and control testing.
o Stay abreast of evolving cybersecurity regulations, technologies, and industry standards.
• Risk & Control Assessment
o Support risk and control self-assessments across cybersecurity domains (e.g., identity management, data protection, incident response, and network security).
o Evaluate control effectiveness against NIST CSF, ISO 27001, and other regulatory frameworks.
o Identify control gaps, track remediation progress, and validate closure activities.
o Track issues and ensure timely remediation of findings.

What You’ll Bring:
• Bachelor’s degree in cybersecurity, information systems, risk management, or related field; or equivalent practical experience.
• Minimum of 3 years of experience in cybersecurity risk management, governance, or controls oversight within a financial services or regulated industry.
• Strong understanding of cybersecurity frameworks (NIST, CIS, ISO), IT general controls, and risk assessment methodologies.
• Excellent verbal and written communication skills, including experience presenting risk insights to management.
• Proven ability to work effectively with audit, technology, and business partners.

Preferred Qualifications
• Professional certifications such as CISSP, CISA, CRISC, or CISM.
• Experience supporting regulatory exams (e.g., NYDFS, OCC, NAIC).
• Familiarity with one or more of the following: AI/ML risk, cloud security, identity and access management, data protection, infrastructure security, endpoint protection, vulnerability management, application security, cybersecurity operations
• Prior experience developing cyber risk metrics or dashboards for leadership.

​

Pay Transparency

Salary Range: $97,500-$139,500 

Overtime eligible: Exempt 

Discretionary bonus eligible: Yes 

Sales bonus eligible: No 

Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.

 

Company Overview 

At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact. 

Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supporte