CISO & Security Services Lead — Cyber Defense

Bank of China; City of Rochester (NY); Hybrid; USD 42,000 - 90,000; Full time

Job summary

Bank of China seeks an Information Security professional to support Security Services and Cyber Defense aligned with the bank's program, covering Security Architecture, Security Engineering, Security Operations, IAM, Threat Management, Vulnerability Management and Penetration Testing.

You will apply security standards for in-house and third-party apps, monitor tools, conduct vulnerability scans, coordinate remediation, and assist in incident investigations.

Qualifications

• Bachelor's degree in business, Computer Science, MIS, Engineering, Mathematics, or related field is required.
• Minimum 1 year of work experience in Information security, cybersecurity, vulnerability management, security architecture, network, security tools and computer systems administration, risk management.
• Good understanding of regulatory requirements including FFIEC, GLBA, NIST.
• Knowledge of Information security and cyber security best practices.
• Knowledge of systems administration such as Windows Server, Active Directory management, Firewall, UNIX system, network architectures, etc.
• Knowledge of security tools such as SIEM, DLP, XDR, EDR, Web Filter etc.
• Good understanding of protocol behaviors, validity of identified vulnerabilities.
• CISSP/CRISC/ or IT related certifications preferred.

Responsibilities

• Security Architecture, Security Engineering & Security Operations (45%)
• Provide Security Standards and requirements for all in-house and Third-Party applications being built or procured by the Bank
• Provide support and expertise to IT to find security solutions that meet requirement
• Manage assigned security monitoring tools for daily security monitoring which includes but not limited to network devices, platforms, databases, applications
• Design, configure and enhance assigned security tools for effective security event monitoring and escalation accordingly
• Conduct assigned security tools rule and configuration validation and monitored devices recertification - Identify and escalation security issues and assist in cybersecurity incident investigations
• Perform regular maintenance of assigned security tools including software upgrades, license updates and fine tuning of rules and configuration
• Threat Management, Vulnerability Management & Penetration Testing (45%)
• Conduct threat assessment and modeling as required
• Conduct vulnerability scans of internal and external network
• Present results to IT and partner to perform analysis, set criticality levels and assign timelines for remediation
• Provide oversight of IT remediation, track and report all findings to the Information Security Committee
• Coordinate penetration testing exercises in collaboration with IT
• Present results to IT and partner to perform analysis, set criticality levels and assign timelines for remediation
• Provide oversight of IT remediation, track and report all findings to the Information Security Committee

Skills

Security Architecture & Engineering

Security Operations

Threat Modeling

Vulnerability Management

Penetration Testing

Identity & Access Management

Education

Bachelor's degree in related field

Tools

SIEM

DLP

XDR

EDR

Web Filter

Job description

Bank of China seeks an Information Security professional to support Security Services and Cyber Defense aligned with the bank's program, covering Security Architecture, Security Engineering, Security Operations, IAM, Threat Management, Vulnerability Management and Penetration Testing.

You will apply security standards for in-house and third-party apps, monitor tools, conduct vulnerability scans, coordinate remediation, and assist in incident investigations.