Description
The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs) / Chief Technology Officers (CTOs).
In this role, you will be supporting a group / team to develop a deep understanding of the business in order to have specialized information security risk-based discussions.
This relationship will ensure a focus on the right risk priorities. You will also provide guidance on information security topics, policies and controls.
Experience in :
- The requirements and certification for Payment Card Industry (PCI) Compliance
- Cryptography and key management across high volume transaction platforms
- Security architecture of core payment systems (i.e. ACH, P2P, B2B)
- Network architecture and security for customer facing and internal corporate systems
- AAA with modern authentication methods for consumer banking systems
- Application development or systems engineer
- Multi-cloud security management
- Prior card network experience preferred
Scale / Scope
- Possess strong / experienced application development and / or application security background; with solid knowledge of SDLC from design, testing, deployment to post-production and the different risk elements associated with each step.
- Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for the line of business (LOB)
- Provides guidance and advocacy regarding the prioritization of LOB investments that impact information security
- Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs
- Monitors information security trends internal and external to the bank and keeps LOB leadership informed about information security-related issues
- Manages quality control and reporting
- Ensures compliance with policies and laws
Risk Management
- Drives GIS / LOB risk deliverables
- Collaborates with risk partners on info security critical priorities
- Participates in senior LOB specific Risk Management & Business Continuity Routines
- Identifies and measures global information security (GIS) controls on most critical business processes or channels
Leadership / Strategy
- Has a deep understanding of security for computing platforms (PaaS)
- Has a solid grasp of security in big data and other instructed large data structures
- Ability to build strong Partner relationships with peer technology groups and supported LOB
- Supports the triage process with the client and helps them understand the GIS support structure
- Drives required risk culture and partnership with peer technology teams and supported LOB
- Participates in key CIO operating routines to drive information security risk strategy
Required Skills
- Information Security & Technology professional with 10+ years’ experience
- 5+ years of risk management experience with proven ability to effectively apply risk principles to challenging business situations
- Subject matter expertise in application security, vulnerability testing and development of risk appetite
- Experience evaluating cyber security controls and providing guidance for platform or distributed computing platforms (Cloud, PaaS)
- Experience with information security for No SQL, Big Data , and unstructured data stores (Cassandra, Hadoop, and / or Teradata)
- Knowledge in Windows, Midrange and Mainframe Platforms with emphasis on security and access controls.
- Exceptional executive presentation and communication skills
- Excellent influencing and problem resolution skills
- Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding
- Strong leadership skills and qualities which enable you to work with peers and various levels of management
Desired
- Bachelors and / or Master’s degree in Computer Science, Information Technology or related field
- CISSP, CISM, or PCI Professional certifications
This job is responsible for partnering with leaders to balance the needs of the business while ensuring information security and organizational risks are appropriately identified and managed to drive uncompromising cyber security protection.
Key responsibilities include leading in-depth information security risk-based discussions and acting as an integrated business partner with cross-functional leaders to provide blended security and business expertise to ensure appropriate management of information security risks.
Shift :
1st shift (United States of America)
Hours Per Week :
Information Security Cloud Remediation Lead - Senior Info Security Officer
The Senior Information Security Consultant will be part of the Global Information Security (GIS) Cyber Security Assurance (CSA) Infrastructure Remediation Governance team. Key responsibilities include leading in-depth information security risk-based discussions and acting as an integrated business p...
IAM Information Security Senior Controls Specialist
The Global Information Security (GIS) Identity & Access Management (IAM) Info Security Senior Controls Specialist must possess a deep understanding of IAM concepts, relevant knowledge of IAM business, and strong technical expertise. Develops/challenges enterprise-wide information security polici...
Chief Information Security Officer
Chief Information Security Officer. Serve as the senior spokesperson for information security, including communicate key issues, risks and progress to governance committees, business executives, Regulators and the Board of Directors. Lead the Enterprise Information Security Group. Drive the design a...
Senior Manager, Third Party Info Security Officer
Information Security Controls (Infrastructure Security, Access Management, Application Security, etc. Establishes and maintains effective working relationships with third parties, acting as a point of contact for information security matters, communicating security requirements, and addressing any c...
Senior Manager, Information Security Risk & Governance
We are looking for a passionate, mission-driven Information Security governance manager to join our expanding Information Security team. Manage and track cybersecurity audit engagements, due diligence activities, and vendor security reviews; Use working knowledge of information security best practic...
Business Information Security Officer/BISO
The Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business and their COOs and their supporting technology teams from the Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). Contribute...
Chief Information Security Officer
They will also set the strategy and priorities for security initiatives, work with customers as needed, and partner with Engineering leadership to support security best practices in development. Develop and maintain key processes like the security incident response procedure, security vendor evaluat...
Senior Counsel - Information and Cyber Security
Work closely with cross-functional teams, including senior business and legal stakeholders, to provide information security and cybersecurity strategy and guidance to support operations and new initiatives. Expertise in information security industry frameworks and standards such as CIS, NIST Cyberse...
Senior Information Security Architect (Mobile Security)
You will be the primary liaison with technology, security, compliance and Senior Technology Managers. Experience and exposure to Information Security principles is preferred. The Security Architect role is responsible for guiding on the design, development, and implementation of architectural princi...
Senior Third-Party Information Security Assessor
These information security areas include governance & risk management, access control, cryptography, physical security, security architecture and design, business continuity/disaster recovery planning, network security, application & operations security, and compliance/incident management. The Senio...