Assistant Deputy Superintendent for Cybersecurity
The New York State Department of Financial Services seeks to build an equitable, transparent, and resilient financial system that benefits individuals and supports business. Through engagement, data-driven regulation and policy, and operational excellence, the Department and its employees are responsible for empowering consumers and protecting them from financial harm; ensuring the health of the entities we regulate; driving economic growth in New York through responsible innovation; and preserving the stability of the global financial system.
The Department of Financial Services is seeking candidates for the position of Assistant Deputy Superintendent for Cybersecurity in the Cybersecurity Division. The incumbent will focus on all aspects of cybersecurity regulations and will report to the Department's Deputy Superintendent for Cybersecurity Law & Policy. Duties include, but are not limited to, the following:
- Provides guidance relating to DFS's Cybersecurity Regulation (23 NYCRR Part 500) to all business units across DFS;
- Addresses cybersecurity and legal issues that arise from DFS's supervision and examinations of all types of DFS-regulated organizations in the financial services industry;
- Manages external engagement with stakeholders such as regulated entities, in coordination with the Deputy Superintendent for Law and Policy, Cybersecurity Division;
- Maintains updated overview for reporting of the Cybersecurity Division's key programs;
- Works with the cybersecurity intelligence and investigation teams regarding cybersecurity incidents that take place at DFS-regulated entities;
- Conducts legal research and prepares memoranda of law and/or reports that relate to the interpretation and enforcement of the Cybersecurity Regulation;
- Drafts regulatory revisions, industry alerts, industry advisories, circular letters, and other guidance;
- Reviews and revises reports on cybersecurity and IT related examinations;
- Assists with, and tracks, cybersecurity-related enforcement actions, where responsibilities could include participating in meetings with the targeted entity and reviewing relevant documents including charging memoranda, penalty calculations, and consent orders;
- Oversees the work of more junior staff, fellows, interns, and paralegals;
- Coordinates and works with other state, federal, and international regulators;
- Works with, and presents to, financial services industry groups to help their members comply with the requirements of DFS's Cybersecurity Regulation;
- Trains and prepares materials regarding cybersecurity regulations to different business units at DFS, including the Cybersecurity Division;
- Keeps track of cyber-related laws and matters in NY, nationally, and internationally; and
- Other duties as assigned.
Minimum Qualifications
- Admission to the New York State Bar, in good standing and at least 6 years legal experience subsequent to admission to the NYS Bar. Legal experience must be in one or more of the following fields:
- Regulatory compliance
- Investigations
- Enforcement
- Experience with cybersecurity regulatory or legal issues in New York or other jurisdictions.
- Ability to write clearly on complex issues.
- Excellent communication and interpersonal skills.
- Knowledge of information technology and IT security concepts.
- Experience analyzing data.
Appointment Method:
This is an appointment to a position in the exempt jurisdictional class. As such, the incumbent of this position would serve at the pleasure of the appointing authority.
Salary: $127,507 - $160,911 (salary commensurate with experience)
Positions located within the New York City metropolitan area, as well as Suffolk, Nassau, Rockland, and Westchester Counties, are also eligible to receive an additional $4,000 annual downstate adjustment.
Appointment Status: This is an appointment to a position in the exempt jurisdictional class.
Appointment to this position is pending Governor Appointment's Office and Division of Budget approval.
Some positions may require additional credentials or a background check to verify your identity.