25 security governance analyst jobs at 21 companies in New York
2mo
Save
Mark Applied
Hide
2mo
Senior Governance Analyst
Greenville or Atlanta or Bengaluru or Hyderabad or Schenectady
$91k-$151k/yrOnsiteFull Time
GE VernovaNYSE: GEV: Global energy providing power generation, electrification, and decarbonization solutions.
1+ YOE1–3 years experience in cyber/IT audit or related field, foundational security and application controls knowledge, hands-on automation/AI curiosity, Excel proficiency, strong communication and analytical skills; bachelor's or equivalent experience.
Enterprise Vulnerability Management (EVM), NIS2, COBIT, SOX, Microsoft Excel, Power BI, Tableau
Arizona or California or Florida or Georgia or Illinois or Massachusetts or Michigan or New Hampshire or New York or New Mexico or North Carolina or Tennessee or Virginia or Medford
$75k-$95k/yrRemoteFull Time
Agero: A private U.S. provider of white-label roadside assistance, accident management, and driver-safety technology for automakers and insurers.
3+ YOERequires 3–5 years in information security compliance and hands-on experience with PCI-DSS, SOC 2, or ISO 27001 frameworks, including control mapping, evidence evaluation, risk mitigation, and strong communication skills.
Point72 Asset Management: Global alternative investment firm utilizing fundamental and systematic strategies.
5+ YOERequires 5+ years in information security, IAM, PAM, or technology risk; PAM, Active Directory, identity lifecycle, governance, remediation, audit support, AI/LLM, communication, and documentation skills.
East Greenbush or Rensselaer County or New York or Albany
$87k-$110k/yrHybridFull Time
New York State: The state government administrative authority of New York.
Requires 7 years in intelligence analysis, homeland security, counterterrorism, emergency preparedness analysis, assessment, or investigations, or qualifying state service. Driver's license and national security clearance required.
New York State Intelligence Liaison Officer (ILO) program, New York State Intelligence Center (NYSIC), Field Intelligence Officer (FIO) program, State Emergency Operations Center (EOC)
Hudson Valley Credit Union: Member-owned nonprofit credit union providing banking, lending, insurance, and wealth-management services to Hudson Valley communities.
3+ YOEBachelor’s degree or equivalent experience, 3+ years in cybersecurity governance and risk, and experience with information security or related fields. Relevant certifications and NIST RMF training preferred.
San Francisco or New York City or Los Angeles or Seattle
$175k-$230k/yrHybridFull Time
Whatnot: Live shopping marketplace connecting buyers and sellers.
8+ YOERequires 8+ years of security GRC experience, bachelor's degree in computer science or information security, audit experience, cloud compliance expertise, and knowledge of ISO 27001, SOC2, PCI, GDPR, and CCPA.
Aaru: A private AI software that simulates human behavior for consumer research, marketing, strategy, and policy decisions.
3+ YOERequires 3–5 years in GRC, security compliance, or IT audit; SOC 2 knowledge; familiarity with ISO 27001 and related frameworks; GRC platform experience; and strong communication and process-building skills.
Vanta, Drata, OneTrust, SOC 2, ISO 27001, NIST CSF, HIPAA, PCI-DSS, ISO 42001, NIST AI RMF, EU AI Act, GDPR, Python, JavaScript, CISA, CRISC, CISM
Ross StoresNASDAQ: ROST: Off-price retailer of apparel and home fashion.
5+ YOEFive years of IT experience, including three in security or risk management; bachelor's degree preferred; security governance, compliance, risk management, analytical, communication, and project management skills required.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
YipitData: Private market intelligence and alternative-data analytics firm serving institutional investors, retailers, brands, and enterprises.
Experience in security, compliance, risk, audit, privacy, or vendor risk; familiarity with SOC 2, NIST CSF, or similar frameworks; strong writing, organization, communication, and follow-through skills.
Palantir TechnologiesNYSE: PLTR: Builds software that empowers organizations to integrate and analyze data.
Requires Secret security clearance, experience in desktop/user support in classified environments, COMSEC experience, facility/vendor management, reside within 60 minutes of the office, and ability to travel 10–25%.
AmazonNASDAQ: AMZN: Multinational technology focused on e-commerce and cloud computing.
4+ YOEBachelor's degree or equivalent and 4+ years in compliance, audit, risk, governance, or related work. Requires IT security, AWS or cloud computing, process documentation, and cross-functional coordination experience.
CognizantNASDAQ: CTSH: Global professional services providing technology and consulting services.
6+ YOERequires 6–8 years in IAM, identity governance, access management, or security operations; expertise in provisioning, JML, RBAC, SoD, access reviews, audits, compliance, and IAM platforms.
SailPoint IIQ/ISC, Saviynt, Okta, CyberArk, Microsoft Entra ID, One Identity Manager, Ping Identity, Active Directory, ServiceNow, SOX, ISO 27001, PCI-DSS, NIST
Community Financial System, Inc.New York Stock Exchange (NYSE): CBU: Your trusted neighborhood banking and financial services provider.
4+ YOEBachelor's in information security/IT or equivalent, 4+ years in information security/risk/TPRM, familiarity with SOC reviews, penetration test summaries, NIST/SIG/CIS frameworks, and AI governance guidance.
Public Health Solutions: New York City nonprofit delivering public-health services, grant administration, and health-equity programs to underserved New Yorkers.
3+ YOEMaster’s in Public Health or related field; 3–5 years policy/public health/data governance experience; strong writing; knowledge of privacy/security frameworks; project management.
ESL Federal Credit Union: Member-owned federal credit union providing personal, business, mortgage, and wealth-management services to Greater Rochester-area people and businesses.
2+ YOEBachelor's degree in a technical field or four additional years of related experience, plus 2+ years supporting application systems, platform configuration, SDLC knowledge, and data governance, security, and API concepts.
CUBRC: Independent nonprofit research, development, testing, and systems-integration serving defense, intelligence, homeland-security, and public-health communities.
3+ YOEBachelor's degree in finance/accounting/business, 3+ years program finance/P&L or FP&A, government contract knowledge preferred, advanced Microsoft Excel, Deltek Costpoint experience preferred, ability to obtain DoD security clearance.
Washington or South Carolina or Tennessee or Florida or New Hampshire or New Jersey or Alabama or Georgia or New York or Vermont or Illinois or North Carolina or Virginia or Kentucky or Ohio or West Virginia or Maine or Maryland or Pennsylvania or Massachusetts or Connecticut or Rhode Island or Delaware
$105k-$120k/yrRemoteFull Time
Motorola SolutionsNYSE: MSI: Global leader in mission-critical communications and security technology.
5+ YOE5+ years experience in quality/service/deployment/engineering or related fields; U.S. citizenship and legal authorization to work in the U.S.; ability to obtain government security clearance; CompTIA Security+ required within 6 months; bachelor’s degree OR 5+ years relevant experience; strong data analysis, RCA, and customer-facing skills.
Constellation BrandsNYSE: STZ: Public beverage alcohol producer, marketer, importer, and distributor serving consumers through beer, wine, and spirits brands.
4+ YOERequires 4+ years in information security, risk management, audit, IT governance, or compliance; TPRM leadership, risk frameworks, automation, stakeholder engagement, and strong communication skills.
NIST, ISO, CIS, PCI-DSS, SOX, GDPR, CCPA, HIPAA, LogicGate, Optro, OneTrust, Workiva, Microsoft Excel, Microsoft Word, Microsoft PowerPoint