This role requires International Banking experience and prefers certifications such as CISSP, CISM, CISA, etc... If you do not have 5 years of banking or financial services experience or at least one of the certifications listed, please do note reply to this position. An International Bank located in midtown NYC is seeking an experienced Information Security Manager for their growing Corporate Bank.
Responsibilities:
· Ensure adherence to Group-wide Information Security Policies, Standards, and Procedures, and the the identification, management, monitoring, and evaluation of information security risks are in line with internal policies and external regulations.· Participate in industry forums, working groups, and professional organizations to maintain awareness of emerging security threats, trends, and best practices.· Provide guidance and consultation to business and technology teams on information security matters.· Formulate security requirements and review the risks on new applications and systems.· Provide guidance and assessment to manage potential threats, incident response, and risks to information as technologies evolve.· Assess requests for security policy exceptions and make recommendations to the ISO and/or senior management regarding disposition.· Maintain, promote, and conduct the Information Security Awareness Program.· · Aid in the preparation of annual and quarterly information security reports and ad-hoc incident reports to Head Office.
Qualifications:
· Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or a related discipline· Minimum 5 years of experience in Information Security, Information Risk Management, IT Governance, IT Audit, Cybersecurity, or related disciplines.· Experience in Banking or Financial Services, or other highly regulated industries preferred· Experience conducting information security risk assessments and reviewing security controls.· Experience supporting audits, regulatory examinations, and remediation activities.· Experience reviewing vendor due diligence documentation, including SOC reports and security questionnaires, preferred.· Familiarity with multi-platform environments and their operational/security considerations· Knowledge of security tools: Vulnerability Assessment Scanners, Intrusion Detection, Syslog Analysis, Anti-Virus, Encryption methodologies, Access Control and Entitlement Rights Management.· Familiarity with banking regulations and good sense of industry best practices.· Firm understanding of ISO 27001, 27002, and FFIEC IT Handbooks.· Good written and oral skills – able to write reports and present results to Senior Management.· Professional certifications preferred, including CISSP, CISM, CRISC, CISA, GIAC, or Microsoft Azure Fundamentals
