Talent.com
AVP, Information Security Engineer
AVP, Information Security EngineerCathay Bank - Headquarters • Rancho Cucamonga, CA, United States
AVP, Information Security Engineer

AVP, Information Security Engineer

Cathay Bank - Headquarters • Rancho Cucamonga, CA, United States
job_description.job_card.1_day_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

People Drive Our Success

Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank - we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset and we proudly foster growth and development empowering you to achieve your professional goals. We have thrived for 60 years and persevered through many economic cycles due to our team members' drive and optimism. Together we can make a difference in the financial future of our communities.

Apply today!

What our team members are saying :

Video Clip 1

Video Clip 2

Video Clip 3

Learn more about us at cathaybank.com

GENERAL SUMMARY

This position is responsible for designing, implementing, and supporting the Bank's Information Security infrastructure and protecting its data and assets in accordance with established Information Security and Bank policies, published regulations and industry best practices.

Responsibilities include performing risk assessments of the Bank's network, applications, and endpoint activity, and manage security projects to implement security controls or tools to mitigate cyber risk, ensuring that the Bank's network and data are secure in accordance with Bank, IT, and IS policies.

ESSENTIAL FUNCTIONS

  • Participate in Business and Information Technology projects to recommend security controls and solutions applicable. Provide recommendations for security infrastructure, developing security plans and standards.
  • Manage trade-offs and determine cost-benefits between new tools to be implemented to the current security stack, and improve existing tools by reconfiguring, repurposing, or training. Identify and evaluate opportunities for process improvement.
  • Maintain strong technical security skills that follow the current market trends to work on both cloud and on-prem based solutions.
  • Serve as Subject Matter Expert (SME) across technical information security domains.
  • Identify and assess vulnerabilities and risks to enterprise applications infrastructure and data. Develop and implement technical solutions to counter vulnerabilities and risks.
  • Track current and emerging security threats, design and implement security solutions to mitigate them.
  • Propose scope, design, and supervise the execution of the penetration test program to reach defined objectives.
  • Review and propose improvements to email, endpoint and network security.
  • Implement the enterprise data loss prevention program by identifying and proposing controls on data loss channels.
  • Ensure that security systems and tools such as firewalls, web filtering, EDR, XDR, NAC for adequate coverage and periodically reassess configurations and security controls for improvements.
  • Maintain information security systems and tools such as CASB, DLP, MDM and WAF and periodically review configurations.
  • Establish, plan, and manage overall program and goals for the system security requirements and baseline configurations.
  • Participate in efforts to remediate audit and regulatory findings and recommendations related to Information Security.
  • Define and implement solutions to meet compliance requirements, including but not limited to : Sarbanes-Oxley, Payment card industry standards, and state and federal regulations.

REQUIRED QUALIFICATIONS

Education : College degree in Information Technology or Information Security or equivalent.

Certification : Requires one or more of the following certifications CISSP, CISM, CRISC, CISA, Security+, EnCE, CEH, OSCP, GIAC. Splunk and Microsoft certifications preferred.

Experience :

  • 5+ years experience in Information Security Operations or Information Security Risk Management, preferably in the financial services industry.
  • 3+ years experience in Security Engineering or Security Architecture role operating and / or implementing SIEM, EDR / XDR, NAC, IDS / IPS, WAF, IAM, FW, AD, EntraID and AVs.
  • Proven experience in securing and implementing policies for Cloud Technologies (M365, Azure, AWS) and the Microsoft (E5) technology stack including Microsoft Defender, Microsoft Intune or similar.
  • Experience defining and / or reviewing firewall rules and IDS / IPS topology and configurations.
  • Experience in defining or participating in penetration tests and / or attack simulation exercises and implementing remediation plans.
  • Strong understanding of networking, communication, and secure email protocols (TCP / IP, UDP, SSL / TLS, IPSEC, SPF, DKIM, DMARC, DNSSEC, etc.)
  • Experience configuring and managing a Security Information and Event Management (SIEM) platform is highly preferred.
  • Governance or oversight of a third-party risk management program experience preferred.
  • Experience implementing tools and policies for Data Loss Prevention, Cloud Access Security Broker (CASB) and Insider Threat Management tools preferred.
  • Experience with Secure Development Life Cycle (SDLC) practices and application security testing, including implementation and use of static and dynamic application security testing platforms preferred.
  • Experience performing and assessing the effectiveness of vulnerability management program and performing security assessments of internal and external systems based on industry standards preferred.
  • Skills / Ability :

  • Proven ability to initiate and manage projects.
  • Self-starter, highly motivated, and able to work with general supervision.
  • Strong documentation skills to include presentations to technical audiences and to business-driven departments.
  • Strong interpersonal communication and collaboration skills.
  • Must be available to respond to emergencies in support of incident investigations carried out by the Security Operations team, or for troubleshooting security tools.
  • Combination of strong troubleshooting, technical and communication skills.
  • OTHER DETAILS

    $100K - $120K / year

    Pay determined based on job-related knowledge, skills, experience, and location.

    This position may be eligible for a discretionary bonus.

    Cathay Bank offers its full-time employees a competitive benefits package which is a significant part of their total compensation. It is our goal to provide employees with a comprehensive benefits package to fit their needs which includes, coverage for medical insurance, dental insurance, vision insurance, life insurance, long-term disability insurance, and flexible spending accounts (FSAs), health saving account (HSA) with company contributions, voluntary coverages, and 401(k).

    Cathay Bank may collect personal information from potential job candidates and applicants. For more information on how we handle personal information and your applicable rights, please review our Privacy Policy .

    Cathay Bank is an Equal Opportunity and Affirmative Action Employer. We welcome applications for employment from all qualified candidates, regardless of race, color, ethnicity, ancestry, citizenship, gender, national origin, religion, age, sex (including pregnancy and related medical conditions, childbirth and breastfeeding), reproductive health decision-making, sexual orientation, gender identity and expression, genetic information or characteristics, disability or medical condition, military status or status as a protected veteran, or any other status protected by applicable law.

    Click here to view the "Know Your Rights : Workplace Discrimination is Illegal" Poster :

    Poster- English

    Poster- Spanish

    Poster- Chinese Traditional

    Poster- Chinese Simplified

    Cathay Bank endeavors to make www.CathayBank.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact, Mickey Hsu, FVP, Employee Relations Manager, at (626) 582-7370 or mickey.hsu@cathaybank.com . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

    serp_jobs.job_alerts.create_a_job

    Information Security Engineer • Rancho Cucamonga, CA, United States

    Job_description.internal_linking.related_jobs
    Principal Security Engineer

    Principal Security Engineer

    VirtualVocations • Huntington Beach, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Principal Security Engineer to lead information security initiatives and collaborate with development and operational teams. Key Responsibilities Identify security threa...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    FIPS Certified Security Engineer

    FIPS Certified Security Engineer

    VirtualVocations • Riverside, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer, FIPS / CC (Mobile Devices).Key Responsibilities Lead the end-to-end validation process for IT products, including assessments, development of security ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    AVP, Information Security Engineer

    AVP, Information Security Engineer

    Cathay Bank - Headquarters • Rancho Cucamonga, CA, United States
    serp_jobs.job_card.full_time
    Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank - we strive to provide a caring culture that supports your aspirations and success....serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Security Engineer

    Security Engineer

    VirtualVocations • Norwalk, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer to handle digital security and incident response.Key Responsibilities : Act as a technical lead within the cyber security group, developing team object...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    VirtualVocations • Fullerton, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Cyber Security Engineer with Federal Experience.Key Responsibilities Serve as a Subject Matter Expert (SME) for Assessment and Authorization (A&A) of information...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior SOC Security Engineer

    Senior SOC Security Engineer

    VirtualVocations • Mission Viejo, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior SOC / Splunk Security Engineer.Key Responsibilities Monitor, detect, and respond to security incidents using SIEM and EDR tools Conduct deep-dive investigations i...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Principal Information Security Engineer

    Principal Information Security Engineer

    VirtualVocations • San Bernardino, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Principal Information Security Engineer.Key Responsibilities Enhance endpoint security strategies by collaborating with various business units Lead modernization and g...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Sr. Security Engineer

    Sr. Security Engineer

    TEKsystems • Tustin, CA, United States
    serp_jobs.job_card.full_time
    Implementation, Operations & Support.Serve as the hands-on lead engineer for network deployment, upgrades, and incident response. Configure and manage Cisco switches, routers, firewalls, WLCs, and w...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Senior Manager Information Security

    Senior Manager Information Security

    VirtualVocations • Riverside, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Manager - Information Security - Threat Management.Key Responsibilities Leads daily security operations, including alerts and incident response Oversees threat ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Security Engineer, DevSecOps

    Security Engineer, DevSecOps

    VirtualVocations • Norwalk, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer on the DevSecOps team.Key Responsibilities Build and maintain infrastructure, including custom software and vendor integrations, to support security n...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Chief Information Security Officer

    Chief Information Security Officer

    VirtualVocations • Norwalk, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Chief Information Security Officer (Remote).Key Responsibilities Define and deliver the enterprise information security strategy aligned with business priorities and ri...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cloud Security Engineer

    Cloud Security Engineer

    VirtualVocations • Irvine, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer, Product Security.Key Responsibilities Design, implement, and manage security controls and policies within AWS Perform security assessments of cloud ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Information Security Engineer

    Senior Information Security Engineer

    First City Credit Union • Altadena, CA, US
    serp_jobs.job_card.full_time
    The Senior Information Security Engineer will assume, but not be limited to, the following responsibilities : .Responsible for designing, managing, and maintaining the credit union's information ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Security Operations Engineer

    Senior Security Operations Engineer

    VirtualVocations • Orange, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Security Operations Engineer (Azure).Key Responsibilities Lead Security Design and Architecture, Log Collection, and Security Incident Management Manage identit...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Information Security Engineer

    Information Security Engineer

    VirtualVocations • Pasadena, California, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information Security Engineer.Key Responsibilities Collaborate with business units to enhance endpoint security strategies Implement system security solutions in mult...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Information Security Director

    Information Security Director

    VirtualVocations • Fullerton, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Director, Information Security.Key Responsibilities Lead the design, implementation, and management of processes to ensure the security of information assets Identify ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Offensive Security Engineer

    Offensive Security Engineer

    VirtualVocations • Riverside, California, United States
    serp_jobs.job_card.full_time
    A company is looking for an Offensive Security Engineer to identify vulnerabilities and enhance security measures.Key Responsibilities Identify vulnerabilities in systems and controls while leadi...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Senior IT Security Engineer

    Senior IT Security Engineer

    VirtualVocations • Whittier, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior IT Security Engineer.Key Responsibilities Design and implement security measures to protect IT infrastructure Monitor and respond to security incidents and vuln...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Security Engineer

    Senior Security Engineer

    VirtualVocations • Pasadena, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Security Engineer to join their security team.Key Responsibilities Manage identity and access management, including Okta SSO and role-based access controls Driv...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Information Security Compliance Leader

    Information Security Compliance Leader

    VirtualVocations • San Bernardino, California, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information Security & Compliance Leader to oversee security and compliance strategies in a healthcare technology environment. Key Responsibilities Develop and impl...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new