Overview
On Site
USD 120,000.00 - 180,000.00 per year
Full Time
Skills
Risk Analysis
Continuous Improvement
Partnership
Collaboration
Clarity
Cadence
Information Security
Risk Management
Risk Assessment
Testing
NIST SP 800 Series
Analytical Skill
Documentation
Cyber Security
Finance
Security+
SSCP
CISA
CISM
CISSP
ISACA
Process Improvement
Evaluation
Law
Job Details
Overview
This remote position supports cybersecurity governance by performing risk and control self-assessments (RCSAs), evaluating cybersecurity controls, and supporting key risk management processes. The role helps identify risk and control gaps, assess cyber risks, and recommends improvements to strengthen the organizations cyber posture. The position provides risk analysis, documentation, and control development support across cybersecurity teams, acting as a resource for process owners and contributing to continuous improvement initiatives.
Responsibilities
Responsibilities
Qualifications
Preferred
The base pay for this position is generally between $120,000 and $180,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.
This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants
Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at
$descr2
$descr3
This remote position supports cybersecurity governance by performing risk and control self-assessments (RCSAs), evaluating cybersecurity controls, and supporting key risk management processes. The role helps identify risk and control gaps, assess cyber risks, and recommends improvements to strengthen the organizations cyber posture. The position provides risk analysis, documentation, and control development support across cybersecurity teams, acting as a resource for process owners and contributing to continuous improvement initiatives.
Responsibilities
Responsibilities
- Execute cybersecurity process level RCSAs in partnership with business function owners and stakeholders
- Document risk and controls assessment results, risk ratings, and supporting evidence in accordance with Enterprise Risk Standards
- Draft, update, and refine control risk and control statements to ensure clarity, effectiveness, and alignment with cybersecurity processes
- Review existing risks and controls for design effectiveness, identifying gaps, inconsistencies, or opportunities for improvements
- Partner with business function owners to periodically update inherent and residual risk ratings for process level risks
- Assist cybersecurity teams with updating control effectiveness and control environment ratings on a regular cadence
- Evaluate cybersecurity risks and controls against Enterprise Policies and Standards, regulatory requirements, and industry standards
- Support remediation planning by documenting gaps, improvement recommendations, and target-state control enhancements
- Participate in projects, assessments, or escalated tasks requiring risk and control expertise
Qualifications
- Bachelor's Degree and 8 years of experience in Information security, cybersecurity, risk management, or a related field OR High School Diploma or GED and 12 years of experience in Information security, cybersecurity, risk management, or a related field
- Experience performing risk assessments, RCSAs, or controls testing
- Working knowledge of cybersecurity processes, controls and risk concepts
- Familiarity with frameworks such as NIST CSF, NIST SP 800-53
- Ability to write clear, actionable control statements and assessment findings
- Strong analytical, documentation, and communications skills
- Ability to work collaboratively with technical and non-technical stakeholders
Preferred
- 4-7 years of experience in Information or cyber security risk or control assessment
- Experience supporting cybersecurity programs within a financial institution or regulated environment
- Certifications such as Security+, SSCP, CISA, CISM, CISSP, CRISC
- Understanding of threat landscapes, IT processes, and common control frameworks
- Experience supporting process improvements, control rationalization, or evidence evaluation
The base pay for this position is generally between $120,000 and $180,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.
This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants
Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at
$descr2
$descr3
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.