IT Security Manager: Cyber Defense & Incident Response

FirstBank Florida; San Juan, Northern (PR, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

FirstBank PR is seeking a Corporate IT Security Manager to lead its cyber-defense program, overseeing monitoring, detection, incident response, vulnerability management, and governance across the organization. The role requires deep banking IT security experience and leadership to drive risk-aware security outcomes.

The position reports to the CSO and collaborates with Architecture, IAM, GRC, Legal, Privacy, and business leaders.

Qualifications

• Bachelor’s Degree in IT, CS, Engineering or Business.
• Six years of Information Security experience in banking or similar environment.
• CISSP, CISM or similar certification highly desirable but not required.
• Master’s degree in related field preferred.
• Strong knowledge of COBIT 5, ISO 27000, NIST and other security frameworks.
• 7+ years in IT/Information Security in banking; financial services advisory experience preferred.
• Minimum 3 years of experience with a financial services company or advisory role.

Responsibilities

• Lead cyber-defense program across monitoring, detection, and response.
• Oversee SOC/MDR performance, vulnerability management, patching, and DLP.
• Coordinate incident response planning, containment, and post-incident reviews.
• Develop cyber-risk metrics and executive dashboards for CSO and boards.
• Collaborate with Architecture, IAM, GRC, Legal, Privacy, ERM and business leaders.
• Lead and develop Cyber Defense personnel; establish on-call coverage and succession plans.

Skills

Cybersecurity Leadership

Incident Response

Threat Intelligence

Risk Management

Security Operations

Vulnerability Management

Project Management

Communication

Education

Bachelor's Degree in IT/CS/Engineering/Business

Master's degree preferred

Tools

Excel

PowerPoint

Job description

FirstBank PR is seeking a Corporate IT Security Manager to lead its cyber-defense program, overseeing monitoring, detection, incident response, vulnerability management, and governance across the organization. The role requires deep banking IT security experience and leadership to drive risk-aware security outcomes.

The position reports to the CSO and collaborates with Architecture, IAM, GRC, Legal, Privacy, and business leaders.