Job description

Location Designation: Hybrid - 3 days per quarter Senior Associate, Cybersecurity Regulatory Compliance What You’ll Do Annual Cybersecurity Compliance Certifications: Assist the CRC Lead in managing the annual cybersecurity compliance certifications, including the following: • Maintaining a detailed tracker of state cybersecurity requirements, including aligned compliance documentation, evidence source, due dates, approval dates, and key decisions and year-over-year changes • Reviewing the Tracker daily to ensure timely responses and reporting weekly to the CRC team on the overall status of the certification process • Communicate and coordinate with all stakeholders involved in the annual certification process, including internal teams, evidence providers, reviewers, and approvers. • Reviewing all responses and evidence for accuracy, completeness, and alignment to state requirements and providing guidance to owners on applicable evidence, as needed • Organizing all responses and evidence in the CRC SharePoint site for review and approval • Managing the internal DocuSign sign-off process, including creating templates for executives to review and approve all evidence, tracking responses, and sending reminder notifications • Collaborating with the CRC Lead on an analysis following completion of the certifications to identify and incorporate improvement opportunities to the procedures consulting with key stakeholders Cybersecurity Regulatory Examinations, Reporting, and Requests: Assist in facilitating all Cybersecurity and Technology examinations, reviews, regulatory reporting, and requests, including the following: • Serving as a liaison between state examiners, Legal and the Cybersecurity and Technology teams • Assessing exam requests and assigning appropriate control owners for response • Creating and maintaining a tracker of all requests, due dates, owners, and responses; follow-up with owners, as needed • Reviewing all responses and evidence for accuracy, completeness, and consistency • Collaborating internally to leverage evidence across various reviews and reporting activities • Maintaining a repository of all regulatory responses and documents provided and sources/key contacts • Organizing responses and evidence for review and approval by senior management and Legal teams • Supporting quarterly compliance reporting activities by coordinating the collection, validation, and maintenance of cybersecurity documentation and evidence demonstrating adherence to SEC and FINRA requirements. What You'll Bring: • Bachelor's degree in Information Security/Technology, Cybersecurity, Risk Management, or a related field; or equivalent work experience. • 3+ years of experience in cybersecurity risk, technology risk, IT audit, regulatory compliance, or related Governance, Risk, and Compliance (GRC) functions, preferably within financial services or insurance environments. • Proven experience supporting IT / cybersecurity audits, regulatory examinations, MAR/SOX compliance activities, or related reviews. • Demonstrated knowledge of Information Security principles, controls, and technology risk management sufficient to independently assess compliance evidence, identify gaps or inconsistencies, and recommend documentation that more effectively demonstrates compliance. • Demonstrated ability to analyze complex information, manage competing priorities, and work independently with limited oversight. • Strong organizational, project management, written communication, and stakeholder management skills. Preferred Skills • Proficiency using Microsoft 365, particularly Teams and SharePoint • Familiarity with AI Generative tools, such as ChatGPT and Copilot • Experience with DocuSign administration and workflow management #LI-VL1 #LI-HYBRID Pay Transparency Salary Range: $111,500-$130,000 Overtime eligible: Exempt Discretionary bonus eligible: Yes Sales bonus eligible: No Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program. Company Overview At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact. Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress. As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it. Our Benefits We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Click here to discover more about our comprehensive benefit options or visit our NYL Benefits Site . Our Commitment to Inclusion At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life’s leadership in this space. Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation . We're proud that due to our mutuality, we operate in the best interests of our policy owners. To learn more about career opportunities at New York Life, please visit the Careers page of www.NewYorkLife.com . Visit our LinkedIn to see how our employees and agents are leading the industry and impacting communities. Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees’ needs. Job Requisition ID: 94660

Requirements

Must-haves

Location Designation: Hybrid - 3 days per quarter
Senior Associate, Cybersecurity Regulatory Compliance
What You’ll Do
Assist the CRC Lead in managing the annual cybersecurity compliance certifications, including the following:
Maintaining a detailed tracker of state cybersecurity requirements, including aligned compliance documentation, evidence source, due dates, approval dates, and key decisions and year-over-year changes
Reviewing the Tracker daily to ensure timely responses and reporting weekly to the CRC team on the overall status of the certification process
Communicate and coordinate with all stakeholders involved in the annual certification process, including internal teams, evidence providers, reviewers, and approvers.
Reviewing all responses and evidence for accuracy, completeness, and alignment to state requirements and providing guidance to owners on applicable evidence, as needed
Organizing all responses and evidence in the CRC SharePoint site for review and approval
Managing the internal DocuSign sign-off process, including creating templates for executives to review and approve all evidence, tracking responses, and sending reminder notifications
Collaborating with the CRC Lead on an analysis following completion of the certifications to identify and incorporate improvement opportunities to the procedures consulting with key stakeholders
Cybersecurity Regulatory Examinations, Reporting, and Requests:
Assist in facilitating all Cybersecurity and Technology examinations, reviews, regulatory reporting, and requests, including the following:
Serving as a liaison between state examiners, Legal and the Cybersecurity and Technology teams
Assessing exam requests and assigning appropriate control owners for response
Creating and maintaining a tracker of all requests, due dates, owners, and responses; follow-up with owners, as needed
Reviewing all responses and evidence for accuracy, completeness, and consistency
Collaborating internally to leverage evidence across various reviews and reporting activities
Maintaining a repository of all regulatory responses and documents provided and sources/key contacts
Organizing responses and evidence for review and approval by senior management and Legal teams
Supporting quarterly compliance reporting activities by coordinating the collection, validation, and maintenance of cybersecurity documentation and evidence demonstrating adherence to SEC and FINRA requirements.

Nice-to-haves

Proficiency using Microsoft 365, particularly Teams and SharePoint
Familiarity with AI Generative tools, such as ChatGPT and Copilot
Experience with DocuSign administration and workflow management

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: eightfold
Effort: medium