Manager, Information Security

Requisition ID: 224242

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Team Lead is responsible for providing advisory services to business lines, subsidiaries, and affiliates, enabling the achievement of the Bank's Information Security Policy. Specifically, the Team Lead will perform and oversee security services for specific projects to assist in the assessment and deployment of technological solutions that integrate security practices to protect Bank information and data resources, by:

- Collaborating with various business lines, IT support functions in support of IS&C Control functions.
- Supporting business lines to develop sound security strategic and tactical plans towards the reliable implementation of consistent and secure control processes to protect the Bank.
- Driving initiatives and supporting business functions to assess security risks and to make informed decisions to protect information assets.
- Providing guidance to design, develop and implement sound risk management controls in accordance with Bank's standards and in support of regulatory or audit requirements specific to cyber and information security that impact US Bank operations.
- Pursuing security and control process improvements to advance security compliance and improve internal processes.
- Reporting to management on the status of the system of internal controls with recommendations for remediation of risks.

**Is this role right for you? In this role you will**:
Leadership and Mentoring
- Drive a customer-focused culture throughout their team to deepen client relationships, accelerate the delivery of secure solutions and platforms, leveraging broader Bank relationships, systems, and information security knowledge.
- Support training initiatives on security best practices.
- Mentor junior team members and assist in their professional development.

Security Solutioning
- Participate in key initiatives and projects driven by various business lines. Advise Project and Delivery Managers to design and establish sound information security practices, ensuring that risk is effectively managed.
- Conduct comprehensive security assessments.
- Review architecture and solution design documentation to identify and assess potential risks.
- Overview and guidance on Security Assessments as required.
- Support the development of security patterns.

Governance
- Comply with internal processes and procedures to perform Security Assessments and certifications and provide Security Advisory services.
- Perform risk management remediation activities.
- Assist with the improvement of Bank Information Security Policies and Standards.
- Support new and existing processes and governance of the US and Global Cybersecurity and Information Security Programs.

Compliance
- Ensure that Bank security solutions evaluated align with industry regulations and organizational compliance requirements.
- Assist in the audit process, responding to compliance assessments and audits.
- Support activities relating to regulatory requirements impacting US banking operations.

Continuous Improvement
- Stay updated with emerging trends in information security and propose improvements to the current security posture and processes.
- Evaluate new information security controls, technologies, tools, and processes to enhance the organization’s security.
- Keep informed and well versed on financial industry regulations demands in US, based on practical experience.
- Help to define and implement operational efficiencies in support of the advisory services.

**Do you have the skills that will enable you to succeed in this role? We’d love to work with you if you have**:

- Post-secondary education in Computer Science or in a related field.
- At least 3 years of experience in security solution architecture, software development, and/or hands-on experience with implementations of security controls.
- Experience supporting complex projects providing security advice to ensure information security risks are mitigated.
- Certifications (CISSP, CISM, CCSP, CRISC, Cloud oriented Google, Microsoft or AWS certificates) are nice to have.
- Familiar with industry standards and frameworks e.g. NIST 800-53, ISO 27001, ISO27002, ISO 27017, ISO27018, PCI DSS.
- Familiarity with US regulatory requirements affecting US Financial Services.
- Knowledge of Vulnerability Management.
- Knowledge of cloud technologies and cloud security (GCP or Azure or AWS, Kubernetes and IAM, CI/CD pipelines, Terraforms, infrastructure as a code).
- Advanced communication (verbal/written/presentation) skills in English.
- Experience implementing and using Governance & Risk Management & Compliance tools (e.g. Service Now, RSA Archer) and project planning tools.

**What's in it for you?**
- Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are