Reporting to the Director of Operational Risk, Information Security & Vendor Management, the Information Security Risk Manager is responsible for assisting the Director of Operational Risk, Information Security & Vendor Management with maintaining and continually enhancing the Bank's information security and second line testing programs Assist with the management of cyber security compliance functions including reporting on gaps, variances, and the assessment and disposition of cyber risk Assist with development, evaluation, and adherence to IT, risk, and information security policies, standards, and procedures
Reporting to the Director of Operational Risk, Information Security & Vendor Management, the Information Security Risk Manager is responsible for assisting the Director of Operational Risk, Information Security & Vendor Management with maintaining and continually enhancing the Bank's information security and second line testing programs Assist with the management of cyber security compliance functions including reporting on gaps, variances, and the assessment and disposition of cyber risk Assist with development, evaluation, and adherence to IT, risk, and information security policies, standards, and procedures
The Information Security Analyst team operates as part of Infrastructure Risk Management (IRM), a department within Global Technology and Operations that is responsible for an enterprise-wide integrated infrastructure risk management program which employs a holistic approach to manage cybersecurity, information security, data privacy, physical security and business continuity led by the Chief Security Officer We are seeking a Nashville-based Senior Information Security Analyst to join our information security analyst team The Senior Information Security Analyst will act as both a senior analyst and a non-managerial leader within the Information Security Analyst team, providing guidance and training to other information security analysts, and collaboration with other corporate business units including but not limited to global enterprise technology, corporate compliance, security assurance, global security operations, and other infrastructure risk business units
