Cyber Security Analyst III

First Citizens Bank

. Leads and supports cybersecurity maturity and risk assessments using the Cyber Risk Institute (CRI) Profile, NIST CSF, NIST SP 800-53, ISO 27001, and FFIEC guidance .

Posted 11/5/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting cybersecurity risk assessments using frameworks such as NIST CSF, ISO 27001, and Cyber Risk Institute Profile, while effectively communicating findings and remediation strategies to stakeholders. Possesses strong analytical skills and technical knowledge in identity and access management, network security, and vulnerability management.

Highest-signal resume keywords

Cybersecurity Risk AssessmentsNIST Cybersecurity Framework (CSF)Identity And Access Management (IAM)Cyber Risk Institute (CRI) ProfileProfessional Certifications (CISSP, CISA, CISM, CRISC)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity FrameworksRisk Management MethodologiesGap AnalysisControl MappingVulnerability ManagementSecurity ArchitectureCloud SecurityEndpoint ProtectionCompliance ReportingRisk Assessment Reporting

Soft Skills

Excellent Communication SkillsAnalytical SkillsProblem-Solving SkillsProject Management SkillsStakeholder Influence

Certifications & Qualifications

CISSPCISACISMCRISC

Industry Keywords

Cyber Risk ManagementRegulatory ComplianceFinancial InstitutionFFIEC GuidanceOCCFRBNYDFSHIPAA

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Leads and supports cybersecurity maturity and risk assessments using the Cyber Risk Institute (CRI) Profile, NIST CSF, NIST SP 800-53, ISO 27001, and FFIEC guidance
Maps control evidence to framework requirements, evaluates maturity levels, identifies gaps, develops recommendations, and supports remediation planning and tracking
Identifies potential risks across operational, technology, and regulatory domains
Works with stakeholders to define and track remediation plans and facilitate risk mitigation strategies aligned with business objectives and regulatory standards
Applies industry-standard frameworks to assess and benchmark the organization's risk posture
Conducts gap analyses, interprets requirements, and recommends solutions for compliance or control gaps
Leverages technical knowledge of identity and access management, network security, cloud security, endpoint protection, vulnerability management, and security architecture to assess risks and validate controls
Collaborates with business, technology, and control owners to communicate assessment results and promote cybersecurity risk awareness
Develops and maintains risk assessment reports and dashboards
Communicates trends, patterns, and emerging risks to leadership
Tracks remediation progress, escalates overdue actions, and highlights areas requiring additional oversight
Maintains awareness of industry standards, threat landscape, and regulatory requirements
Incorporates emerging practices into the organization's risk assessment methodology

Requirements

What you’ll need

Bachelor's Degree and 6 years' experience OR High School Diploma or GED/Equivalent and 10 years' experience in Information Security
Direct experience performing cybersecurity risk assessments, including scoping, evaluation, gap analysis, and reporting
Strong knowledge of cybersecurity frameworks and assessment methodologies, including the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, and FFIEC guidance
Demonstrated experience applying cybersecurity frameworks within complex and highly regulated organizations
Direct experience performing Cyber Risk Institute (CRI) Profile assessments, including control mapping, evidence review, maturity evaluation, gap identification, reporting, and remediation tracking
Technical expertise across IAM, security architecture, network and cloud security, endpoint protection, and vulnerability management
Experience identifying risks, defining remediation strategies, and partnering with stakeholders to reduce risk exposure
In-depth practical knowledge of internal controls, cybersecurity processes, and risk management methodologies
Excellent written and oral communication skills, with ability to influence stakeholders and communicate effectively at multiple levels
Professional certifications such as CISSP, CISA, CISM, CRISC, or similar
7–10 years of experience in cybersecurity risk management, or cyber risk oversight including direct execution of cyber risk assessments
3+ years of experience in a Large Financial Institution or similarly regulated environment
Familiarity with regulatory requirements and expectations related to cybersecurity risk management, including FFIEC, OCC, FRB, NYDFS, HIPAA, state law, and other guidance
Strong analytical, problem-solving, and project management skills
Experience with continuous improvement of risk assessment methodologies and reporting practices

Benefits

Comp & perks

Competitive, thoughtfully designed and quality benefits program
Benefits information available at https://jobs.firstcitizens.com/benefits