Financial Services Specialist 1 (Cybersecurity), SG-18

The duties that the incumbent of the vacancy will be expected to perform. Duties Description The New York State Department of Financial Services seeks to build an equitable, transparent, and resilient financial system that benefits individuals and supports business. Through engagement, data-driven regulation and policy, and operational excellence, the Department and its employees are responsible for empowering consumers and protecting them from financial harm; ensuring the health of the entities we regulate; driving economic growth in New York through responsible innovation; and preserving the stability of the global financial system.The Department of Financial Services is seeking applicants for the position of Financial Services Specialist 1 (Cybersecurity) in the Cybersecurity Division. Under the direct supervision of higher level staff, the Financial Services Specialist 1 (Cybersecurity)’s duties will include, but not be limited to, the following: • Conducts full scope and target examinations in accordance with State and Federal Financial Institution Examination Council programs of Information Technology (IT) environments (i.e., systems management, electronic financial transactions, internet security, computer banking, etc.) at regulated institutions and technology service providers to ascertain safety and soundness of regulated institutions and for compliance with the relevant laws and regulations, including the Department’s first-in-the-nation Cybersecurity regulation, NYCRR Part 500; • Determines adequacy of records, systems and controls in traditional and emerging financial companies to ensure they meet security, operational, and regulatory requirements;;• Assesses the systems supporting back-office operations (i.e., systems for trading and investment activities and other financial and insurer functions), and the automated systems providing the middle office and front office with the position, limit and other reports necessary to manage risk;• Assists in the pre-planning and scoping for targeted examinations of regulated entities;• Contributes to writing and/or manage writing the IT/Cybersecurity portion of overall examination reports or target examination reports;• Discusses IT examination findings and prepares and delivers findings of such examinations to Department staff and management;• Review and assess adequacy of policies and procedures relative to IT operations and cybersecurity practices; • Conducts and participates in training or assists in structuring and preparation of training Department staff on examination issues;• Assess cybersecurity and regulatory risk of new virtual currencies and perform pre- and post-implementation reviews; and• Other duties as assigned.• Travel may be required up to 75 %.

The minimum qualifications required for this vacancy. Minimum Qualifications Appointment method: Candidates must meet the minimum qualifications listed below in order to be eligible for appointment: Non-Competitive: A Bachelor’s Degree or higher in Computer Information Systems, Computer Science, Criminal Justice, Cybersecurity, Information Security, Information Systems, Information Technology, International or Public Affairs, Law, or Technology and two (2) years of specialized experience in the following: • Establishing, managing or auditing cybersecurity and technical control programs with industry standard frameworks such as Federal Financial Institutions Examination Council (FFIEC), National Institute of Standards and Technology (NIST), SysAdmin, Audit, and International Organization for Standardization (ISO).Substitutions: A Master’s Degree in one (1) of the related fields or a J.D. may substitute for one (1) year of specialized experience. A Ph.D. in one (1) of the related fields may substitute for two (2) years of specialized experiencePreferred Certifications/Experience Conference of State Bank Supervisors (CSBS): Certified Cybersecurity Examiner.Industry Designations (these are specifically cited in the CSBS Cybersecurity Examiner Certification): • Certified Information Systems Security Professional (CISSP)• Systems Security Certified Practitioner (SSCP)• Certified Cloud Security Professional (CCSP)• Certified Cyber Forensics Professional (CCFP)• CSX Practitioner or CSX Specialist (CSXP,CSXS)• Certified Information Systems Auditor (CISA)• Certified in Risk and Information Systems Control (CRISC)• Certified in the Governance of Enterprise IT (CGEIT)• Certified in Information Assurance (CIA)• Sensitive Security Information, Certified (SSI)• Certified in Cyber Warfare (CCW)In addition, DFS prefers candidates who have experience establishing, managing, or auditing cybersecurity and technical control program Control Objectives for Information Related Technologies (COBIT) and Center for Information Security (CIS) Critical Controls.

Additional comments regarding the vacancy. Additional Comments Positions located within the New York City metropolitan area, as well as Suffolk, Nassau, Rockland, and Westchester Counties, are also eligible to receive an additional $3,400 annual downstate adjustment.

Some positions may require additional credentials or a background check to verify your identity.

Salary : $3,400