FedNow Lead Cyber Risk Engineer

Company

Federal Reserve Bank of Boston

Federal Reserve Financial Services (FRFS) delivers a suite of payments services to financial institutions via FedLine® Solutions, Fedwire® Funds and Securities, the National Settlement Service (NSS), FedCash®1, FedACH®, Check Services, and the FedNow® Service.

FRFS operates as a fully integrated organization with groups dedicated to customer experience, operations, technology, product and customer/industry management, enterprise services, payments system improvement, and one focused on the ongoing growth and development of the FedNow instant payment service.

Our strategy defines our future direction, seeking to offer a fully integrated product suite that provides speed, resilience, and choice in meeting the payments needs of FRFS customers across the United States.

Through our Enterprise structure, we strive to meet the needs of the marketplace for new products and services with speed and agility, seek to provide a robust and unified customer experience, and work to create career growth opportunities for FRFS staff.

The FRFS Enterprise operates with a customer-first mindset, comprised of team members seeking to do the best work of their careers in pursuit of our important central bank mission.

The Federal Reserve has developed a new interbank 24x7x365 real-time gross settlement (RTGS) service with integrated clearing functionality, called the FedNow Service.

This service enables financial institutions to provide their customers with the ability to send and receive payments any time, any day, and have full access to those funds within seconds.

This position is a unique opportunity to be part of this mission-critical Federal Reserve initiative that is transforming the payments landscape in the United States.

The position will be primarily on-site with residency commutable to one of our offices required.

This position is responsible for leading implementation and management of the FRS cyber security framework for the FedNow service.

Lead Cyber Risk Engineer reports to Sr Cyber Risk Manager.    

Key Responsibilities


* Augmenting AI and automation, design and implement solutions to mature GRC function in the DevSecOps framework (e.g., Policy as Code, CI/CD pipeline compliance checks).



* Lead and coordinate the implementation of security control requirements and related processes based on Federal Reserve information security framework and standards and in support of FedNow DevSecOps.

This includes executing security activities based on NIST frameworks and related assessment activities for FedNow information systems.



* Review and analyze cloud vendor and inherited service provider security posture, e.g., FedRAMP packages, establish control ownership, and identity control gaps and associated risk.



* In coordination with various stakeholders, document and maintain a detailed data and information element matrix for system services highlighting sensitive and PII data and develo...