Location Designation: Hybrid - 3 days per month
The Cyber Resiliency Lead role is responsible for developing, implementing, and overseeing cyber resilience strategies that strengthen the organization's ability to withstand and recover from advanced cyber disruptions across core technology layers. This role will be part of the first line cybersecurity team within NYL's Information Technology Department. Responsibilities include resilience planning for core technology infrastructure and applications, as well as driving integration of cyber scenarios into disaster recovery (DR), business continuity (BC), and enterprise resilience efforts. The role serves as the critical bridge between cybersecurity, enterprise technology, and enterprise risk management.
What You'll Do:Program Development
- Review and recommend cyber resilience recovery strategies and options and assist with the implementation of recovery solutions.
- Champion cyber resilience objectives in collaboration with infrastructure, enterprise technology, risk, and resiliency teams.
- Act as a thought leader on cyber resilience trends and industry best practices.
- Develop, implement, and maintain Objectives and Key Results (OKRs) and other relevant metrics to measure cyber resilience program effectiveness, maturity, and alignment with organizational goals.
Core Technology Resilience
- Assess and enhance recovery readiness for core technology services including (but not limited to) identity and access management (IAM), network, DNS, endpoint detection and response (EDR), and cloud platforms.
- Develop recovery tiering and technical recovery playbooks for cyber incidents (e.g., ransomware, data corruption, destructive attacks).
- Support impact assessments for emerging technologies (e.g., AI, zero trust, hybrid cloud) on cyber resilience.
Clean Room / Recovery Environment Ownership
- Lead decisioning and implementation of clean room and isolated recovery environments for rapid reconstitution.
- Define access, tooling, and procedures for maintaining and validating clean-room readiness.
- Implement (or partner with teams to support implementation) tools and solutions to be used for the recovery environment (e.g., cyber vault, recovery orchestrations, forensics)
Integration with BCP/DR (includes Preparedness testing)
- Enhance DR testing procedures to include cyber-disruption scenarios and recovery validation in partnership with enterprise resilience, enterprise technology, and business partners.
- Define minimum viable business and technology service levels for post-incident operation.
- Coordinate and lead cyber-focused tabletop exercises, cyber disruption scenarios, and recovery simulations for critical systems. and playbook validation.
- Coordinate post-mortem reviews and incorporate lessons learned into future planning.
- Partner with Enterprise Resiliency to assess business function-level preparedness
- Coordinate development of annual cyber resilience program objectives and schedules for annual recovery playbook maintenance and update, exercises and independent review and validation.
- Develop and coordinate cyber resilience program artifacts, including reporting, tracking, and monitoring.
- Provide expertise and support to management and recovery functions, as requested, when business disruption occurs.
- Work with critical third-party vendors to ensure that business requirements are addressed.
Standards, Policy & Governance
- Define standards for cyber readiness, recovery point/time objectives (RPO/RTO) under attack conditions, and cyber crisis escalation in partnership with enterprise risk management.
- Participate in governance bodies related to resilience, risk, and incident response.
What You'll Bring:- 15+ years in cybersecurity, technology risk, or IT disaster recovery roles
- Deep understanding and experience in cybersecurity operations, incident response, infrastructure resilience, and threat scenarios (e.g., ransomware, destructive malware).
- Experience developing recovery architecture and procedures for hybrid environments (cloud/on-prem).
- Familiarity with frameworks like NIST CSF, ISO 27031, and FFIEC Business Continuity Handbook.
- Strong leadership, collaboration, and communication skills across executive, technical, and operational levels. Prior experience with disaster recovery tools (e.g., Cohesity, Dell Cyber Recovery, AWS/Azure/GCP disaster recovery solutions).
- Excellent communication skills and experience in reporting progress, status and outcomes to management.
#LI-CD2
Pay TransparencySalary Range: $185,000-$264,500
Overtime eligible: Exempt
Discretionary bonus eligible: Yes
Sales bonus eligible: No
Actual base salary will be determined based on several factors but not limited to individual's experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.
Our BenefitsWe provide a full package of benefits for employees - and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work.Click hereto discover more about our comprehensive benefit options or visit our NYL Benefits Site.
Job Requisition ID: 93298
