Cybersecurity Specialist Jobs in New York
Cybersecurity Specialist jobs in New York are among the most active in the country, with strong demand from financial services, healthcare, and government sectors at every level from entry-level analyst through senior architect. The heaviest hiring concentrates in New York City, Albany, and Buffalo, where institutions like JPMorgan Chase, IBM, and Northrop Grumman maintain large security operations. The most sought-after specialties in New York are cloud security, threat intelligence, and compliance-focused roles tied to financial and healthcare regulatory requirements. Find a role that fits below and apply directly.
Find Cybersecurity Specialist JobsOverview
Showing 5 of 8+ Cybersecurity Specialist jobs
INTRODUCTION
Cybersecurity Resilience Specialist - Governance Risk and Compliance
LOCATION
Location: New York
EMPLOYMENT TYPE
Employment Type: Regular
JOB CODE
Job Code: A04064
Responsibilities
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.
Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
As a Cybersecurity Resilience Specialist at TikTok, you will serve as the connective tissue between security, engineering, operations, and business operations ensuring that TikTok's most critical processes, departments, systems, and third-party partners can withstand, respond to, and recover from cybersecurity threats and disruptions. You will work across every major function of the organization, translating complex cyber risk into actionable resilience strategies and preparing teams at all levels to perform when it matters most.
As a Security Resilience Specialist, you will be responsible for:
- Identifying and mapping TikTok's most critical business processes, departments, systems, and third-party dependencies conducted Business Impact Analyses (BIAs) and Technology Impact Analyses (TIAs) to define Recovery Time Objectives/Recovery Point Objectives (RTOs/RPOs) and single points of failure
- Partnering cross-functionally with infrastructure, Site Reliability Engineering, application, legal, procurement, and business teams to embed resilience and security requirements in critical business functions
- Governing, documenting, and continuously improving Disaster Recovery (DR) architectures including failover strategies, backup and replication methods, and multi-region redundancy in collaboration with engineering and platform teams
- Leading and facilitating cyber-resilience exercises such as failover simulations, recovery validation tests, load/stress assessments, and cyberattack tabletop scenarios
- Preparing business units, technology teams, and leadership to understand their roles in cybersecurity scenarios by building organizational readiness and response capability, not just documentation
- Identifying, tracking, and remediating third-party risks across the full vendor lifecycle from pre-onboarding through operational monitoring to offboarding and reviewing secure technical integrations including APIs, network connections, cloud configurations, and identity/access patterns
MINIMUM QUALIFICATIONS
- Deep knowledge of continuity methodologies and standards (e.g., ISO 22301, NIST SP 800-34, FFIEC), with hands-on experience conducting BIAs, TIAs, and dependency mapping to define RTOs/RPOs and validate technical recovery strategies
- Ability to translate third-party and technical risk into clear business impact, aligning resilience strategies with cybersecurity controls, regulatory requirements, and operational priorities
- Ability to work from the NYC office at least 5 days per week, with domestic and international travel as needed
PREFERRED QUALIFICATIONS
- 5 years in business continuity, disaster recovery, operational risk, or cyber resilience, with a demonstrated track record of leading technical continuity and recovery initiatives across complex, global environments
- Experience supporting enterprise-scale resilience programs in high-growth, rapidly evolving, or highly scrutinized technology environments
- Hands-on experience with business continuity planning tools, platforms, or GRC systems
- Relevant certifications such as CBCP, ISO 22301 Lead Implementer, CRISC, CISM, or PMP
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or equivalent practical experience
COMPENSATION
- Compensation Description (Annually): The base salary range for this position in the selected city is $134400 - $235600 annually.
Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
FOR LOS ANGELES COUNTY (UNINCORPORATED) CANDIDATES:
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:
-
Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
-
Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
-
Exercising sound judgment.
ABOUT TIKTOK
TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and we also have offices in New York City, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.
WHY JOIN US
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
DIVERSITY & INCLUSION
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
TIKTOK ACCOMMODATION
TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/RA-request
INTRODUCTION
Cybersecurity Resilience Specialist - Governance Risk and Compliance
LOCATION
Location: New York
EMPLOYMENT TYPE
Employment Type: Regular
JOB CODE
Job Code: A04064
Responsibilities
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.
Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
As a Cybersecurity Resilience Specialist at TikTok, you will serve as the connective tissue between security, engineering, operations, and business operations ensuring that TikTok's most critical processes, departments, systems, and third-party partners can withstand, respond to, and recover from cybersecurity threats and disruptions. You will work across every major function of the organization, translating complex cyber risk into actionable resilience strategies and preparing teams at all levels to perform when it matters most.
As a Security Resilience Specialist, you will be responsible for:
- Identifying and mapping TikTok's most critical business processes, departments, systems, and third-party dependencies conducted Business Impact Analyses (BIAs) and Technology Impact Analyses (TIAs) to define Recovery Time Objectives/Recovery Point Objectives (RTOs/RPOs) and single points of failure
- Partnering cross-functionally with infrastructure, Site Reliability Engineering, application, legal, procurement, and business teams to embed resilience and security requirements in critical business functions
- Governing, documenting, and continuously improving Disaster Recovery (DR) architectures including failover strategies, backup and replication methods, and multi-region redundancy in collaboration with engineering and platform teams
- Leading and facilitating cyber-resilience exercises such as failover simulations, recovery validation tests, load/stress assessments, and cyberattack tabletop scenarios
- Preparing business units, technology teams, and leadership to understand their roles in cybersecurity scenarios by building organizational readiness and response capability, not just documentation
- Identifying, tracking, and remediating third-party risks across the full vendor lifecycle from pre-onboarding through operational monitoring to offboarding and reviewing secure technical integrations including APIs, network connections, cloud configurations, and identity/access patterns
MINIMUM QUALIFICATIONS
- Deep knowledge of continuity methodologies and standards (e.g., ISO 22301, NIST SP 800-34, FFIEC), with hands-on experience conducting BIAs, TIAs, and dependency mapping to define RTOs/RPOs and validate technical recovery strategies
- Ability to translate third-party and technical risk into clear business impact, aligning resilience strategies with cybersecurity controls, regulatory requirements, and operational priorities
- Ability to work from the NYC office at least 5 days per week, with domestic and international travel as needed
PREFERRED QUALIFICATIONS
- 5 years in business continuity, disaster recovery, operational risk, or cyber resilience, with a demonstrated track record of leading technical continuity and recovery initiatives across complex, global environments
- Experience supporting enterprise-scale resilience programs in high-growth, rapidly evolving, or highly scrutinized technology environments
- Hands-on experience with business continuity planning tools, platforms, or GRC systems
- Relevant certifications such as CBCP, ISO 22301 Lead Implementer, CRISC, CISM, or PMP
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or equivalent practical experience
COMPENSATION
- Compensation Description (Annually): The base salary range for this position in the selected city is $134400 - $235600 annually.
Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
FOR LOS ANGELES COUNTY (UNINCORPORATED) CANDIDATES:
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:
-
Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
-
Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
-
Exercising sound judgment.
ABOUT TIKTOK
TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and we also have offices in New York City, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.
WHY JOIN US
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
DIVERSITY & INCLUSION
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
TIKTOK ACCOMMODATION
TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/RA-request
See All 8 Cybersecurity Specialist Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find Cybersecurity Specialist JobsCybersecurity Specialist Jobs by City in New York
Where New York roles are concentrated, by current openings.
Cybersecurity Specialist Job Market in New York
A snapshot from current New York openings, updated as new roles post.
Who's Hiring
- 9fin1
- Bloomberg1
- Genpact1
- Georgia-Pacific1
- Google1
Top Industries Hiring
- Technology & Software3
- Banking & Financial Services1
- Consulting & Professional Services1
- Food & Beverage1
- Manufacturing1
What New York Employers Look For
The qualifications that appear most often in cybersecurity specialist jobs across New York.
- Bachelor's degree in cybersecurity, computer science, or a closely related field
- Relevant certification such as CISSP, CompTIA Security+, or CEH
- Hands-on experience with SIEM platforms, firewalls, and endpoint protection tools
- Knowledge of regulatory frameworks including NIST, ISO 27001, and NY DFS cybersecurity regulations
- Demonstrated ability to perform vulnerability assessments and penetration testing
- Strong communication skills for translating technical risk to non-technical stakeholders
Cybersecurity Specialist Jobs in New York: Frequently Asked Questions
How do you become a cybersecurity specialist in New York?
New York does not require a state-issued license to work as a cybersecurity specialist, but employers expect a bachelor's degree in cybersecurity, computer science, or information systems alongside recognized certifications like CISSP or CompTIA Security+. New York's financial sector also looks for familiarity with New York Department of Financial Services cybersecurity regulations, which have become a practical credential signal for roles in banking and insurance. Building hands-on lab experience and earning at least one vendor-neutral certification is the most reliable path into the field.
How much do cybersecurity specialists make in New York?
Cybersecurity specialists in New York earn a median of about $134,660 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $83,110 for the lowest 10% to over $216,220 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire cybersecurity specialists in New York?
Employers hiring cybersecurity specialists in New York right now include 9fin, Bloomberg, and Genpact, based on current listings on Migrate Mate as of June 2026. New York City's dense concentration of financial institutions, large hospital systems, and federal contractors keeps demand for security professionals consistently high across industries.
Which New York cities have the most cybersecurity specialist jobs?
New York, Albany, and Buffalo are the New York cities with the most cybersecurity specialist openings. New York City dominates because of its concentration of global banks, insurance firms, and media companies, each operating under strict data protection requirements, while Albany and Buffalo draw openings from state government agencies, regional healthcare networks, and defense contractors that maintain significant operations outside the metro.
Are there remote cybersecurity specialist jobs in New York?
Yes, and more than most fields, because much of the work involves monitoring systems and analyzing data that can be done from anywhere. About 0% of cybersecurity specialist openings tied to New York are remote or hybrid as of June 2026, reflecting how broadly the role has shifted toward distributed security operations. Threat analysis, incident response coordination, and compliance auditing are the sub-areas most commonly offered with remote flexibility.
How can I get hired as a cybersecurity specialist in New York with little or no experience?
The most realistic entry path is landing a security operations center analyst role, which large New York employers like financial institutions and hospital networks regularly open to candidates with a CompTIA Security+ certification and little formal experience. New York City-based firms and state agencies often run associate or rotational technology programs designed for recent graduates. Moving laterally from IT help desk or network administration roles is also a common route, since those positions build the hands-on system knowledge hiring managers look for in junior security hires.
Where can I find and apply to cybersecurity specialist jobs in New York?
You can find and apply to cybersecurity specialist jobs in New York on Migrate Mate, which lists current openings from employers hiring in the state right now. Find roles that fit your experience and specialty area and apply directly to the employers posting them.
See All 8 Cybersecurity Specialist Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find Cybersecurity Specialist Jobs