Senior Manager, IT Security

Description

Position Summary 

The Security Manager supports the AVP of Security Operations and is responsible for a variety of information security functions within the Information Technology Department. 

Essential Job Functions:

• Develop and maintain security design and configuration documentation to ensure effective delivery and continual improvement of network solutions
• Responsible for tracking and ensuring remediation of technical items identified from vulnerability management program, audits, penetration testing, etc.
• Oversee the day-to-day Security Operations Center tasks and responsibilities
• Generate reporting metrics for security events and vulnerability remediations
• Maintain operational procedures that adhere to the latest guidelines defined by NIST Cybersecurity Framework
• Ensure that security programs comply with relevant laws, regulations, and policies to minimize or eliminate risk and audit findings
• Provide guidance and mentorship to the Security Analysts
• Manage security incidents and events to protect corporate IT assets including intellectual property, regulated data, and the bank’s reputation
• Assisting in troubleshooting and solving a wide variety of security issues
• Conduct and attend project meetings to provide security and governance input throughout project lifecycles.
• Collaborate within IT and other teams to address identified gaps in areas where there are no appropriate or insufficient information security controls or solutions
• Educate, train and work collaboratively across the development teams on building secure platforms and implementing security best practices.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, and services, including, but not limited to, privacy, risk management, compliance, and business continuity management

Position Requirements:

• Strong leadership skills and the ability to work effectively with business managers, IT Engineering, and IT Operations staff.
• A strong understanding of the business impact of security tools, technologies, and policies
• Strong analytical skills to analyze security requirements and relate them to appropriate security
• controls.
  Excellent communication skills, verbal and written
• Experience with audit and compliance functions.
• Possess skills in technical writing.
• Highly organized work habits.
• Ability to handle multiple projects simultaneously
• Desired certifications: CISSP and CISM