Information Security Manager - International Banking

The Horizon Group; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

The Horizon Group, an International Bank located in Midtown NYC, seeks an experienced Information Security Manager for its Corporate Bank. The role requires 5+ years in information security and a strong regulatory mindset, with certifications such as CISSP, CISM, CISA preferred.

You will guide security policy, risk management, and incident response across business and technology teams. Responsibilities include ensuring policy adherence, risk assessment, security controls review, and

Qualifications

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or related discipline.
• Minimum 5 years of experience in Information Security, Information Risk Management, IT Governance, IT Audit, Cybersecurity, or related disciplines.
• Experience in Banking or Financial Services or other highly regulated industries preferred.
• Experience conducting information security risk assessments and reviewing security controls.
• Experience supporting audits, regulatory examinations, and remediation activities.
• Experience reviewing vendor due diligence documentation, including SOC reports and security questionnaires, preferred.

Responsibilities

• Ensure adherence to Group-wide information security policies, standards and procedures and manage information security risks.
• Participate in industry forums, working groups, and professional organizations to stay aware of threats and best practices.
• Provide guidance and consultation to business and technology teams on information security matters.
• Formulate security requirements and review risks on new applications and systems.
• Provide guidance and assessment to manage threats, incident response, and risks as technologies evolve.
• Assess requests for security policy exceptions and advise senior management on disposition.

Skills

Information security

Risk assessment

Auditing

Regulatory compliance

Vendor due diligence

Communication skills

Education

Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or related discipline

Tools

Vulnerability Assessment Scanners

Intrusion Detection

Syslog Analysis

Anti-Virus

Encryption methodologies

Access Control & Entitlement Rights Management

Job description

This role requires International Banking experience and prefers certifications such as CISSP, CISM, CISA, etc... If you do not have 5 years of banking or financial services experience or at least one of the certifications listed, please do note reply to this position.

An International Bank located in midtown NYC is seeking an experienced Information Security Manager for their growing Corporate Bank.

Responsibilities

• Ensure adherence to Group-wide Information Security Policies, Standards, and Procedures, and the the identification, management, monitoring, and evaluation of information security risks are in line with internal policies and external regulations.
• Participate in industry forums, working groups, and professional organizations to maintain awareness of emerging security threats, trends, and best practices.
• Provide guidance and consultation to business and technology teams on information security matters.
• Formulate security requirements and review the risks on new applications and systems.
• Provide guidance and assessment to manage potential threats, incident response, and risks to information as technologies evolve.
• Assess requests for security policy exceptions and make recommendations to the ISO and/or senior management regarding disposition.
• Maintain, promote, and conduct the Information Security Awareness Program.
• Aid in the preparation of annual and quarterly information security reports and ad-hoc incident reports to Head Office.

Qualifications

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or a related discipline
• Minimum 5 years of experience in Information Security, Information Risk Management, IT Governance, IT Audit, Cybersecurity, or related disciplines.
• Experience in Banking or Financial Services, or other highly regulated industries preferred
• Experience conducting information security risk assessments and reviewing security controls.
• Experience supporting audits, regulatory examinations, and remediation activities.
• Experience reviewing vendor due diligence documentation, including SOC reports and security questionnaires, preferred.
• Familiarity with multi-platform environments and their operational/security considerations
• Knowledge of security tools: Vulnerability Assessment Scanners, Intrusion Detection, Syslog Analysis, Anti-Virus, Encryption methodologies, Access Control and Entitlement Rights Management.
• Familiarity with banking regulations and good sense of industry best practices.
• Firm understanding of ISO 27001, 27002, and FFIEC IT Handbooks.
• Good written and oral skills – able to write reports and present results to Senior Management.
• Professional certifications preferred, including CISSP, CISM, CRISC, CISA, GIAC, or Microsoft Azure Fundamentals