Job Requisition ID:91940 Location Designation:Hybrid - 3 days per month As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting-edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth - driving the company's success. The Cyber Resiliency Lead role is responsible for developing, implementing, and overseeing cyber resilience strategies that strengthen the organization's ability to withstand and recover from advanced cyber disruptions across core technology layers. This role will be part of the first line cybersecurity team within NYL's Information Technology Department. Responsibilities include resilience planning for core technology infrastructure and applications, as well as driving integration of cyber scenarios into disaster recovery (DR), business continuity (BC), and enterprise resilience efforts. The role serves as the critical bridge between cybersecurity, enterprise technology, and enterprise risk management. What You'll Do: Program Development
- Review and recommend cyber resilience recovery strategies and options and assist with the implementation of recovery solutions.
- Champion cyber resilience objectives in collaboration with infrastructure, enterprise technology, risk, and resiliency teams.
- Act as a thought leader on cyber resilience trends and industry best practices.
- Develop, implement, and maintain Objectives and Key Results (OKRs) and other relevant metrics to measure cyber resilience program effectiveness, maturity, and alignment with organizational goals.
Core Technology Resilience
- Assess and enhance recovery readiness for core technology services including (but not limited to) identity and access management (IAM), network, DNS, endpoint detection and response (EDR), and cloud platforms.
- Develop recovery tiering and technical recovery playbooks for cyber incidents (e.g., ransomware, data corruption, destructive attacks).
- Support impact assessments for emerging technologies (e.g., AI, zero trust, hybrid cloud) on cyber resilience.
Clean Room / Recovery Environment Ownership
- Lead decisioning and implementation of clean room and isolated recovery environments for rapid reconstitution.
- Define access, tooling, and procedures for maintaining and validating clean-room readiness.
- Implement (or partner with teams to support implementation) tools and solutions to be used for the recovery environment (e.g., cyber vault, recovery orchestrations, forensics)
Integration with BCP/DR (includes Preparedness testing)
- Enhance DR testing procedures to include cyber-disruption scenarios and recovery validation in partnership with enterprise resilience, enterprise technology, and business partners.
- Define minimum viable business and technology service levels for post-incident operation.
- Coordinate and lead cyber-focused tabletop exercises, cyber disruption scenarios, and recovery simulations for critical systems. and playbook validation.
- Coordinate post-mortem reviews and incorporate lessons learned into future planning.
- Partner with Enterprise Resiliency to assess business function-level preparedness
- Coordinate development of annual cyber resilience program objectives and schedules for annual recovery playbook maintenance and update, exercises and independent review and validation.
- Develop and coordinate cyber resilience program artifacts, including reporting, tracking, and monitoring.
- Provide expertise and support to management and recovery functions, as requested, when business disruption occurs.
- Work with critical third-party vendors to ensure that business requirements are addressed.
Standards, Policy & Governance
- Define standards for cyber readiness, recovery point/time objectives (RPO/RTO) under attack conditions, and cyber crisis escalation in partnership with enterprise risk management.
- Participate in governance bodies related to resilience, risk, and incident response.
What You'll Bring:
- 15+ years in cybersecurity, technology risk, or IT disaster recovery roles
- Deep understanding and experience in cybersecurity operations, incident response, infrastructure resilience, and threat scenarios (e.g., ransomware, destructive malware).
- Experience developing recovery architecture and procedures for hybrid environments (cloud/on-prem).
- Familiarity with frameworks like NIST CSF, ISO 27031, and FFIEC Business Continuity Handbook.
- Strong leadership, collaboration, and communication skills across executive, technical, and operational levels. Prior experience with disaster recovery tools (e.g., Cohesity, Dell Cyber Recovery, AWS/Azure/GCP disaster recovery solutions).
- Excellent communication skills and experience in reporting progress, status and outcomes to management.
Pay Transparency Salary Range:$155,000-$267,500 Overtime eligible:Exempt Discretionary bonus eligible:Yes Sales bonus eligible:No Actual base salary will be determined based on several factors but not limited to individual's experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program. Our Benefits We provide a full package of benefits for employees - and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Click here to discover more about our comprehensive benefit options or visit our NYL Benefits Site. Our Commitment to Inclusion At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life's leadership in this space. Recognized as one of Fortune's World's Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by theFoundation.We're proud that due to our mutuality, we operate in the best interests of our policy owners. To learn more about career opportunities at New York Life, please visit the Careers page of www.NewYorkLife.com. Visit our LinkedIn to see how our employees and agents are leading the industry and impacting communities. Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees' needs. Job Requisition ID:91940
|