Information Security Manager

The Horizon Group; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

The Horizon Group in New York, NY is seeking an experienced Information Security Manager to lead our corporate bank security program. This Sr.

role requires international banking experience and relevant certifications and will oversee risk assessments, policy adherence, and incident response. You will guide business and technology teams on security controls, manage vendor due diligence, and coordinate reporting to Head Office.

Qualifications

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or a related discipline.

Responsibilities

• Ensure adherence to Group-wide Information Security Policies, Standards, and Procedures and manage information security risks.
• Participate in industry forums and working groups to stay current on threats and best practices.
• Provide guidance to business and technology teams on information security matters.
• Formulate security requirements and review risks on new applications and systems.
• Assist in incident response and risk management as technologies evolve.
• Review security policy exceptions and advise senior management on disposition.
• Maintain Information Security Awareness Program.
• Support relationships with Head Office, vendors, and service providers.
• Prepare information security reports to Head Office.

Skills

Information Security

Risk Management

IT Governance

IT Audit

Cybersecurity

Regulatory Examinations

Education

Bachelor’s degree in Information Technology/Information Security/Cybersecurity/Risk Management

Tools

Vulnerability Scanners

Intrusion Detection

Syslog Analysis

Anti-Virus

Encryption

Access Control & Entitlement

Job description

This is a Sr level role and requires International Banking experience and certifications such as CISSP, CISM, CRISC, CISA, GIAC and FFIEC experience. If you do not have 5 years of experience or at least one or two of the certifications listed, please do note reply to this position.

An International Bank located in midtown NYC is seeking an experienced Information Security Manager for their growing Corporate Bank.

Responsibilities

• Ensure adherence to Group-wide Information Security Policies, Standards, and Procedures, and the the identification, management, monitoring, and evaluation of information security risks are in line with internal policies and external regulations.
• Participate in industry forums, working groups, and professional organizations to maintain awareness of emerging security threats, trends, and best practices.
• Provide guidance and consultation to business and technology teams on information security matters.
• Formulate security requirements and review the risks on new applications and systems.
• Provide guidance and assessment to manage potential threats, incident response, and risks to information as technologies evolve.
• Assess requests for security policy exceptions and make recommendations to the ISO and/or senior management regarding disposition.
• Maintain, promote, and conduct the Information Security Awareness Program.
• Help define, manage, and maintain service and operating level agreements; support the relationships between the NY Branch, subsidiaries and representative offices, our Head Office, Third Party Service Providers, Vendors, and Managed Service Providers.
• Aid in the preparation of annual and quarterly information security reports and ad-hoc incident reports to Head Office.

Qualifications

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or a related discipline
• Minimum 5 years of experience in Information Security, Information Risk Management, IT Governance, IT Audit, Cybersecurity, or related disciplines.
• Experience in Banking or Financial Services, or other highly regulated industries preferred
• Experience conducting information security risk assessments and reviewing security controls.
• Experience supporting audits, regulatory examinations, and remediation activities.
• Experience reviewing vendor due diligence documentation, including SOC reports and security questionnaires, preferred.
• Familiarity with multi-platform environments and their operational/security considerations
• Knowledge of security tools: Vulnerability Assessment Scanners, Intrusion Detection, Syslog Analysis, Anti-Virus, Encryption methodologies, Access Control and Entitlement Rights Management.
• Familiarity with banking regulations and good sense of industry best practices.
• Firm understanding of ISO 27001, 27002, and FFIEC IT Handbooks.
• Good written and oral skills – able to write reports and present results to Senior Management. Effectively able to communicate with peers explaining complex concepts or processes in layman’s terms.
• Professional certifications preferred, including CISSP, CISM, CRISC, CISA, GIAC, or Microsoft Azure Fundamentals