Lead - Information Security & Cyber Security - Bank

Responsibilities:

- Lead the development, enforcement, and maintenance of policies, procedures, measures, and mechanisms to protect the confidentiality, integrity, and availability of information at the Bank.

- Initiate, implement and develop information security and disaster discovery programs in accordance with approved information security standards.

- Oversee and lead the coordination process of all Cybersecurity Operations activities such as incident management, vulnerability and patch management, and threat analytics;

- Work with and manage third party service partners as needed on risk assessments, vulnerability scans, penetration testing, incident management, managed SIEM, IDS/IPS, Data Loss Prevention (DLP), Firewalls, MDR, ETP, APT, threat intelligence etc;

- Manage the consolidation of large sets of data specific to threats and vulnerabilities to apply accurate risk weighting and prioritization;

- Coordinate remediation efforts of identified cybersecurity vulnerabilities;

- Provide Incident Response support when analysis confirms actionable incident;

- Ensure the successful completion and recording of scanning activities as required by audit and regulatory authorities;

- Investigate, document, and report on information security issues and emerging trends;

- Coordinate efforts with GRC functions to meet and exceed Risk and Compliance requirements;

- Coordinate and assist in the development, automation, execution and monitoring of security operations controls in support of the Information Security Program;

- Monitor access to all systems and maintains access control profiles on computer network and systems. Track documentation of access authorizations to all resources.

- Work with the Risk Management on determining acceptable risk levels for the enterprise and ensuring the IT environments are adequately protected from potential risks and threats.

- Develop, document, and maintain repeatable mechanisms to determine, measure, and report to management an accurate view of significant current and near-future IS-related risks.

- Develop and enhance KRIs and Dashboards to report and monitor security risks.

- Participate in development and implementation of the appropriate and effective controls to mitigate identified threats and risks

- Initiate, facilitate, and promote activities to create information security awareness throughout the bank and administer the Security Awareness Program.

- Analyze, document, and track any exceptions to corporate IT policies, procedures and standards.

- Involved in the life cycle of Information Technology projects ensuring they are developed and deployed within the security and regulatory framework established by the Bank.

- Evaluate information security issues related to third parties in order to conform to the Banks Vendor Management policy.

- Conduct internal monitoring of the banks infrastructure and serve as an internal consultant for security issues.

- Perform periodic evaluations of systems and access to ensure that appropriate controls and access levels are maintained.

- Report to the IT Steering Committee matters relating to Information Security and Cyber Security Resilience.

- Maintain current with information security practices and technologies and related regulatory issues.

- Administer and manage the Banks disaster recovery and business continuity plans.

- Administer and manage the Banks all active devices such as Anti-Virus, APT/ETP/Firewalls/Core Switches/Routers etc.

- Oversee incident response planning as well as the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches as necessary.

- Coordinate scheduled testing for compliance with emergency preparedness and business resumption planning. Maintenance and enhancements to existing security roles and permissions. Review completed roles/permissions with users to ensure requirements are fully met.

- Deliver services that meet regulatory specifications & compliance

- Performs other duties and responsibilities as required or assigned by Management