> Markdown version of [/jobs/ext/1265842-senior-analyst-cybersecurity-it-control-design](https://www.wearedevelopers.com/jobs/ext/1265842-senior-analyst-cybersecurity-it-control-design). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Analyst, Cybersecurity/IT Control Design... - **Company:** National Planning Corporation - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $95,170.0 - $156,355.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Control Objectives for Information and Related Technology (COBIT), CompTIA Security+, Cyber Security, Identity and Access Management, Information Technology Audit, Data Logging, Google Cloud, Information Technology, Data Analytics - **Published:** July 14, 2026 - **Apply:** https://www.juju.com/job/00000000gglu5r ## About the Role + Passionate about cybersecurity, control design and IT control and risk management + Detail and analytically oriented + Flexible and resourceful in managing multiple priorities + Able to effectively collaborate within your own team and across the organization You have + Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Technology Risk Management, or a related field (or equivalent experience) + 3+ years of experience in cybersecurity, architecture, IT risk, or technology audit + Experience designing controls to address risks, identifying residual risks, and executing control assurance procedures (design and operating effectiveness) + Strong understanding of control frameworks and regulatory expectations (e.g., NIST CSF/800-53, MAR, COBIT, SOC 2, NYDFS, etc.) + Experience working with public cloud platforms (AWS, Azure, GCP) and validating control evidence (e.g., IAM, logging, encryption, configuration baselines) + Relevant certifications (e.g., CISSP, CISA, CRISC, Security+, CCSP) or demonstrated progress toward one, Guardian Life is not currently or in the foreseeable future sponsoring employment-based visas (e.g., such as an H-1B). In order to be a successful applicant, you must be legally authorized to work in the United States, without the need for employer sponsorship/support now or at any time in the future. ## Description Do you want to be part of a collaborative team? Are you a problem solver who enjoys diving into security risk, translating complex technical concepts for business partners, and driving meaningful risk reduction across the enterprise? As a Senior Analyst, Cybersecurity/IT Control Design and Monitoring, you will help ensure controls are designed and monitored in alignment with policies. You will partner across Cybersecurity, Technology, Risk Management, and Internal Audit to design controls, evaluate control performance through data-driven assurance, and drive timely remediation of control gaps. In partnership with 2nd line and control owners, this role helps to manage risk exposure and maintain alignment with policies and internal standards., + Engage in new projects (Tech Governance process) to ensure the appropriate controls are designed and implemented to meet policies, including as appropriate those related to Key Financial Systems (KFS) + Partner with internal audit Model Audit Rule team and risk team to ensure controls designs are appropriate + Perform initial validation of designed controls to ensure they are operating effectively prior to go-live Cyber Control Monitoring & Self-Assessment + Contribute to the implementation and day-to-day operations of the first line information security continuous control monitoring program + Partner with control owners to validate control performance, investigate exceptions, and document root cause and corrective actions + In partnership with 2nd line, maintain a control inventory and control-to-evidence mapping aligned to internal policy and external frameworks; ensure controls have clear owners, descriptions, and measurable success criteria + Identify coverage gaps, control weaknesses, and emerging risks through ongoing monitoring, and drive changes to the 1st line monitoring program based on findings + Develop and maintain control test procedures (what is tested, data sources, sampling/coverage, frequency, and pass/fail criteria) and ensure results are reproducible and audit-ready Risk Remediation + Assist D&T control owners in designing remediation plans that address root-cause correction, appropriate compensating controls, and achieve measurable risk reduction + Validate effectiveness of remediation actions identified through the 1st line monitoring program, confirm resolution and adequacy to prevent recurrence Reporting Relationship + As our Senior Analyst, Cybersecurity/IT Control Design and Monitoring, you will report to our Head of Cybersecurity Governance. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)