The Senior Technology Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Front Line Units (FLU) / Operations (Ops) executives. In this role, you will support a team to develop a deep understanding of the business to facilitate specialized, risk-based information security discussions. This relationship will ensure a focus on the right risk priorities and provide guidance on information security topics, policies, and controls.
Scale/Scope
- Contribute to the ongoing development, implementation, and maintenance of information security initiatives for FLU/Ops.
- Serve as an Information Security subject matter expert, participating in the development, implementation, and maintenance of security measures for FLU/Ops.
- Provide guidance and advocacy on prioritizing investments impacting information security.
- Advise management on risk issues related to information security and recommend actions supporting the bank's risk management and compliance programs.
- Monitor internal and external information security trends and keep leadership informed.
- Manage quality control and reporting.
- Ensure compliance with policies and laws.
Risk Management
- Drive GIS/FLU/Ops risk deliverables.
- Collaborate with risk partners on critical information security priorities.
- Participate in senior FLU/Ops Risk Management & Business Continuity routines.
- Identify and measure global information security controls on critical business processes or channels.
Required Skills
- 10+ years of experience as an Information Security & Technology professional.
- 5+ years of risk management experience with proven ability to apply risk principles effectively.
- Subject matter expertise in application security, vulnerability testing, and risk appetite development.
- Experience evaluating cybersecurity controls and guiding platform or distributed computing platforms (Cloud, PaaS).
- Experience with NoSQL, Big Data, and unstructured data stores (e.g., Cassandra, Hadoop, Teradata).
- Knowledge of Windows, Midrange, and Mainframe platforms, emphasizing security and access controls.
- Exceptional communication and presentation skills, with the ability to convey messages across technical and non-technical audiences.
- Strong leadership and influencing skills to collaborate effectively across various management levels.
Desired Skills
- Bachelor's and/or Master's degree in Computer Science, Information Technology, or related fields.
This position will be open and accepting applications for at least seven days from the posting date.