IT Security Engineer Jobs in New York
IT Security Engineer jobs in New York represent one of the most active markets in the country, concentrated in financial services, healthcare, media, and critical infrastructure across New York City, Albany, and Buffalo. Major institutions with a lasting presence here, including JPMorgan Chase, Citigroup, and IBM, consistently hire at every level from entry-level analysts through senior security architects. The most in-demand specialties are cloud security, threat intelligence, and identity and access management. Find a role that fits below and apply directly.
Find IT Security Engineer JobsOverview
Showing 5 of 11+ IT Security Engineer jobs
Company overview
Department Overview:
Risk Management supports Nomura to achieve its business goals by partnering with business units across the firm, providing independent advice to the Board and protecting the firm from exposure to losses as a result of credit, market, operational and other risks.
The Operational Risk Management (ORM) 2LoD function is part of the Risk Management organization and is responsible for:
- Developing operational risk frameworks and policies
- Providing independent oversight over operational risks and challenging First Line of Defense
- Monitoring risk appetite compliance
- Reporting to senior management and committees
Key Responsibilities:
In this role, you will be the second line of defense risk manager overseeing Nomura Information Technology and Information Security (IT & IS), Business Resilience as well as Third Party risks (TPRM). You will focus on:
- Check and Challenge the ICT risk profile of the Americas operations as well as participate in risk management programs for Nomura globally
- Provide independent risk opinions on compliance with relevant regulatory and industry expectations (NIST, FFIEC…)
- Review the risk profile across IT change management, identity and privileged access (IAM/PAM), resilience, vulnerability and patch management, data leakage prevention, etc.
- Review and challenge the 1LoD controls rollout and results.
- Produce and/or contribute to management dashboard, focusing on remediation action when needed.
- Review and Challenge the Business Continuity Management (BCM) program (BCP, testing…).
- Third-Party risk oversight
- Assess independently the adherence to industry and regulatory standards e.g. interagency guidance
- Review the proper tiering of TPs, due diligence standards, monitoring of risk acceptances…
- Independently challenge criticality and materiality designations, with particular focus on material outsourcing and intragroup service arrangements
Required Qualifications:
- 15+ years in a technical role along with exposure to / experience in technology risk management, information security, or IT audit.
- Bachelor's degree in computer science, engineering, or information systems; CISSP, CISA, CISM, CRISC, or CCSP preferred.
- Hands-on technical experience in engaging 1LoD experts on technical issues.
- Experience in proactively sustaining independent check and challenges with first line.
- Understanding of Industry standards and regulatory expectations, with experience implementing or auditing IT and IS risk compliant framework.
Nomura Leadership Behaviors
- Explore Insights & Vision: Identify the underlying causes of problems faced by you or your team and define a clear vision and direction for the future.
- Making Strategic Decisions: Evaluate all the options for resolving the problems and effectively prioritize actions or recommendations.
- Inspire Entrepreneurship in People: Inspire team members through effective communication of ideas and motivate them to actively enhance productivity.
- Elevate Organizational Capability: Engage proactively in professional development and enhance team productivity through the promotion of knowledge sharing.
- Inclusion: Foster a culture of inclusion and psychological safety in the workplace and cultivate a "Risk Culture" (Challenge, Escalate and Respect).
- base pay offered may vary depending on multiple individualized factors, including market location, corporate and functional title and duties, job-related knowledge and advanced degrees, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
Nomura is an Equal Opportunity Employer
Nearest Major Market: Manhattan
Nearest Secondary Market: New York City
Company overview
Department Overview:
Risk Management supports Nomura to achieve its business goals by partnering with business units across the firm, providing independent advice to the Board and protecting the firm from exposure to losses as a result of credit, market, operational and other risks.
The Operational Risk Management (ORM) 2LoD function is part of the Risk Management organization and is responsible for:
- Developing operational risk frameworks and policies
- Providing independent oversight over operational risks and challenging First Line of Defense
- Monitoring risk appetite compliance
- Reporting to senior management and committees
Key Responsibilities:
In this role, you will be the second line of defense risk manager overseeing Nomura Information Technology and Information Security (IT & IS), Business Resilience as well as Third Party risks (TPRM). You will focus on:
- Check and Challenge the ICT risk profile of the Americas operations as well as participate in risk management programs for Nomura globally
- Provide independent risk opinions on compliance with relevant regulatory and industry expectations (NIST, FFIEC…)
- Review the risk profile across IT change management, identity and privileged access (IAM/PAM), resilience, vulnerability and patch management, data leakage prevention, etc.
- Review and challenge the 1LoD controls rollout and results.
- Produce and/or contribute to management dashboard, focusing on remediation action when needed.
- Review and Challenge the Business Continuity Management (BCM) program (BCP, testing…).
- Third-Party risk oversight
- Assess independently the adherence to industry and regulatory standards e.g. interagency guidance
- Review the proper tiering of TPs, due diligence standards, monitoring of risk acceptances…
- Independently challenge criticality and materiality designations, with particular focus on material outsourcing and intragroup service arrangements
Required Qualifications:
- 15+ years in a technical role along with exposure to / experience in technology risk management, information security, or IT audit.
- Bachelor's degree in computer science, engineering, or information systems; CISSP, CISA, CISM, CRISC, or CCSP preferred.
- Hands-on technical experience in engaging 1LoD experts on technical issues.
- Experience in proactively sustaining independent check and challenges with first line.
- Understanding of Industry standards and regulatory expectations, with experience implementing or auditing IT and IS risk compliant framework.
Nomura Leadership Behaviors
- Explore Insights & Vision: Identify the underlying causes of problems faced by you or your team and define a clear vision and direction for the future.
- Making Strategic Decisions: Evaluate all the options for resolving the problems and effectively prioritize actions or recommendations.
- Inspire Entrepreneurship in People: Inspire team members through effective communication of ideas and motivate them to actively enhance productivity.
- Elevate Organizational Capability: Engage proactively in professional development and enhance team productivity through the promotion of knowledge sharing.
- Inclusion: Foster a culture of inclusion and psychological safety in the workplace and cultivate a "Risk Culture" (Challenge, Escalate and Respect).
- base pay offered may vary depending on multiple individualized factors, including market location, corporate and functional title and duties, job-related knowledge and advanced degrees, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
Nomura is an Equal Opportunity Employer
Nearest Major Market: Manhattan
Nearest Secondary Market: New York City
See All 11 IT Security Engineer Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find IT Security Engineer JobsIT Security Engineer Jobs by City in New York
Where New York roles are concentrated, by current openings.
IT Security Engineer Job Market in New York
A snapshot from current New York openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
- Education
- Healthcare & Medical Services
What New York Employers Look For
The qualifications that appear most often in IT security engineer jobs across New York.
- Bachelor's degree in cybersecurity, computer science, or a related field required
- Certified Information Systems Security Professional (CISSP) or equivalent certification strongly preferred
- Hands-on experience with SIEM platforms such as Splunk or Microsoft Sentinel
- Proficiency in network security, firewalls, intrusion detection, and endpoint protection tools
- Familiarity with compliance frameworks including NIST, ISO 27001, and SOC 2
- Experience conducting vulnerability assessments, penetration testing, or security audits
IT Security Engineer Jobs in New York: Frequently Asked Questions
How do you become a it security engineer in New York?
Most it security engineer roles in New York require a bachelor's degree in cybersecurity, computer science, or information systems, paired with recognized certifications such as CompTIA Security+, CISSP, or Certified Ethical Hacker. New York does not issue a state-specific license for this role, but employers in regulated industries like finance and healthcare expect candidates to demonstrate compliance knowledge relevant to New York's SHIELD Act and applicable federal frameworks. Building hands-on experience through internships or entry-level SOC analyst positions at New York firms strengthens your application considerably.
How much do IT security engineers make in New York?
IT security engineers in New York earn a median of about $134,660 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $83,110 for the lowest 10% to over $216,220 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire it security engineers in New York?
Employers hiring it security engineers in New York right now include Stratford Solutions, Nomura, and Wolters Kluwer, based on current listings on Migrate Mate as of September 2026. New York's concentration of major financial institutions, global media companies, and large hospital networks means demand stays consistent across industries beyond pure technology firms.
Which New York cities have the most it security engineer jobs?
New York, Brooklyn, and New York City have the most it security engineer openings in New York. New York City dominates due to its dense concentration of global banks, insurance carriers, and healthcare systems that require dedicated security teams, while Albany's government agencies and Buffalo's growing financial technology sector generate steady demand outside the metro.
Are there remote it security engineer jobs in New York?
Yes, and more than most technical fields. About 38% of it security engineer openings tied to New York are remote or hybrid as of September 2026, reflecting the desk-based and analytical nature of much of the work. Roles focused on cloud security architecture, threat intelligence analysis, and security policy tend to carry the most remote flexibility, while positions requiring hands-on lab work or on-site infrastructure access remain primarily in-person.
How can I get hired as a it security engineer in New York with little or no experience?
The most realistic entry path is a junior SOC analyst or IT support role at a New York financial institution or hospital system, which routinely hire candidates without direct security experience. Large New York employers including major banks and healthcare networks run associate security programs and rotational technology programs for recent graduates. Earning CompTIA Security+ before applying, building a home lab portfolio, and targeting contract or temp-to-hire roles through New York staffing firms focused on financial technology are all credible ways to get a foot in the door.
Where can I find and apply to it security engineer jobs in New York?
You can find and apply to it security engineer jobs in New York on Migrate Mate, which lists current openings across the state. Search the available roles, find the ones that match your experience and target location, and apply directly to the positions that fit.
See All 11 IT Security Engineer Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find IT Security Engineer Jobs