Job Description:
Advises LOB management on risk issues related to information security and recommends actions in support of the bank’s wider risk management and compliance programs.
The successful candidate will:
- Provide advisory and oversight for changes within CBWT environment where related to security leveraging the regional information security consultants and global operational response teams as needed
- Work in collaboration with the Risk teams supporting them in their activities and helping them continue to develop processes and solutions
- Work with the global BISO organization to ensure that GIS requirements and initiatives are communicated, discussed and tracked in an effective, consistent and timely way
- Establish and maintain a network of stakeholders and partners
- Conduct routine liaison and coordination across the risk partners and technology groups to remediate GIS issues showing red or amber on the vulnerability remediation dashboard
- Coordinate and drive remediation of ad hoc GIS issues and assist partners to reach a resolution in line with GIS baselines and standards
Minimum Years of Experience - 5
Required Qualifications:
- Experience within an information security technology operational, engineering or consulting team with good knowledge of the security controls and processes required within systems and networks
- Strong interpersonal skills to be able to communicate, influence and negotiate with senior stakeholders to obtain or leverage necessary resources
Desired Qualifications:
- Bank Operations experience helpful, but not required
- Experience within a technology and financial organization at a mid-level to senior level with good knowledge of Application Security controls and risks.
- Understanding of the concepts of vulnerability management and associated monitoring solutions and practices
- Experience of formal security risk assessment methodologies
- In depth technical level of understanding of Technology Infrastructure operations, showing a strong understanding of relevant subject matters
- Previous experience working within a financial institution
- Ability to initiate own work priorities and manage a portfolio independently
- Good communicator able to deliver difficult messages and resolve issues with stakeholders
- Show ability to work as part of integral team
- Excellent oral and written briefing skills with the ability to produce and present management progress and status reports
Responsibilities:
- Assists business leaders and technology teams by supporting initiatives requiring Global Information Security (GIS) engagement and facilitating problem resolution for cyber security related issues
- Serves as a common risk control partner in order to identify emerging security risks in the portfolio
- Drives adherence to appropriate risk tolerance levels, operating in accordance with defined information security policies to protect against threats to data confidentiality, integrity, and availability
- Promotes awareness of current and emerging cybersecurity threats and advises on potential information security exposure
- Assesses and mitigates cyber security risks related to application, network, infrastructure, and public cloud
- Interprets the information security requirements outlined in policies, standards, and procedures and reinforces requirements through education and awareness
- Supports teammates who serve as “security ambassadors” in order to help partners drive strategic and innovative risk mitigation priorities and navigate the GIS organization
Skills:
- Controls Management
- Cyber Security
- Data Governance
- Information Systems Management
- Risk Management
- Architecture
- Customer and Client Focus
- Executive Presence
- Threat Analysis
- Vendor Management
- Advisory
- Business Acumen
- Business Intelligence
- Cloud Solutions
- Technology System Assessment
1st shift (United States of America)