Job Description

Job Description

About the Role

The New York Times is looking for an enthusiastic professional to join Technology Risk and Compliance as a Risk Management Analyst.

The Technology Risk team within the Technology Risk and Compliance Department ensures risk management and data protection in compliance with PCI, SOX, the NIST Cybersecurity Framework and other relevant existing and upcoming requirements. The team works across the company and in particular with Technology, Legal, Finance, Human Resources, and Data Governance.

The Analyst will function as a risk assessor with a focus on identifying gaps in technology and data processes, controls and security. You will be the contact for technology risk management, tracking risks and remediation in our GRC system, and managing data quality for risk management and reporting to senior management. In addition, you will work with stakeholders to reach agreement in order to recommend and/or design new controls to support technology security and data protection.

Responsibilities:

* Responsible for risk assessments: auditing controls, processes and/or systems to identify the threats and vulnerabilities that lead to a risk

* Analyze system and data gaps to identify and report impact and likelihood to the business via qualitative and quantitative metrics

* Act as data quality advocate for GRC data such as risks, system information, and processes

* Conduct root cause analysis of problems and apply business knowledge and practical experience to recommend/implement controls and enhancements

* Ensure processes are fully met in line with company guidelines and support compliance reviews, testing and audits

* Work with partners, vendors and consultants to address support and project activities

* Assist with new project and team workloads as needed

* Maintain working knowledge of security and compliance technology trends and best practices

Basic Qualifications:

* 3+ years in technology risk management, audit or the field of cybersecurity

* 2+ years experience in at least 2 of the following areas:

* NIST Cybersecurity Framework

* SOX 404, PCI DSS, HITRUST or HITECH

* Data analysis and pipelining (ingestion, API, application integrations)

* Data classification and rights management technologies

Preferred Qualifications:

* Current industry knowledge in the fields of risk management and technology.

LI-AM1

The New York Times is committed to a diverse and inclusive workforce, one that reflects the varied global community we serve. Our journalism and the products we build in the service of that journalism greatly benefit from a range of perspectives, which can only come from diversity of all types, across our ranks, at all levels of the organization. Achieving true diversity and inclusion is the right thing to do. It is also the smart thing for our business. So we strongly encourage women, veterans, people with disabilities, people of color and gender nonconforming candidates to apply.

The New York Times Company is an Equal Opportunity Employer and does not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual orientation or affectional preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status and other personal characteristics protected by law. All applications will receive consideration for employment without regard to legally protected characteristics. The New York Times Company will consider qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local Fair Chance laws.