Senior Analyst, Cybersecurity/IT Control Design and Monitoring
$95,170–$156,355 year
Hybrid · New York City, New York, United States or Bethlehem, Pennsylvania, United States
Job Summary
Senior Analyst, Cybersecurity/IT Control Design and Monitoring responsible for ensuring IT controls are designed and monitored in alignment with policies across Cybersecurity, Technology, Risk Management, and Internal Audit. Partner with 2nd line and control owners to validate control performance, drive remediation of control gaps, maintain a control inventory and mapping to policy/frameworks, develop test procedures, and support risk reduction efforts. Role involves initial validation of designed controls before go-live, contributing to the continuous control monitoring program, identifying coverage gaps and emerging risks, and assisting in remediation planning. Requires collaboration within the team and across the organization, strong analytical detail orientation, and experience with cloud platforms and control frameworks. Location is flexible to three days per week in Guardian offices in New York, NY or Bethlehem, PA (hybrid arrangement). Salary range provided as a base pay estimate; additional incentive compensation may apply. Guardian Life is not sponsoring visas for this role.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Technology Risk Management, or related field (or equivalent experience)
- 3+ years of experience in cybersecurity, architecture, IT risk, or technology audit
- Experience designing controls to address risks, identifying residual risks, and executing control assurance procedures (design and operating effectiveness)
- Strong understanding of control frameworks and regulatory expectations (e.g., NIST CSF/800-53, MAR, COBIT, SOC 2, NYDFS)
- Experience working with public cloud platforms (AWS, Azure, GCP) and validating control evidence (IAM, logging, encryption, configuration baselines)
- Relevant certifications (e.g., CISSP, CISA, CRISC, Security+, CCSP) or demonstrated progress toward one
- Security/Technology Control Design responsibilities
- Cyber Control Monitoring & Self-Assessment responsibilities
- Risk Remediation responsibilities
- Reporting relationships and location requirements
- Visa sponsorship not available
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.