Senior Information Security Officer
: Job Details :

Job Purpose:The position will be responsible for overseeing and reporting on the management and mitigation of information security risks including cybersecurity across the branch and should be held accountable for the results of this oversight and reporting. The position is responsible for implementing an information and cybersecurity program satisfying Cybersecurity Regulation (NYDFS Part 500), Information Security Standards (GLBA) and other regulatory requirements. The position oversees and implements the cybersecurity program and enforces cybersecurity policy and procedures for the branch.Key Responsibilities:Implementing the Information Security / Cybersecurity strategy and objectives including strategies to monitor and address current and emerging risks.Engaging with management in the lines of business to understand new initiatives, providing information on the inherent information security / Cybersecurity risk of these activities, and outlining ways to mitigate the risks.Working with management in the lines of business to understand the flows of information the risks to that information, and the best ways to protect the information.Monitoring emerging risks and implementing mitigations.Informing the branch, management and staff of information security and cybersecurity risks and the role of staff in protecting information.Championing Information security / Cybersecurity awareness and training programs.Participating in industry collaborative efforts to monitor, share, and discuss emerging security threats.Reporting significant information security/cybersecurity events to the branch, government agencies and law enforcement, as appropriate.Develop Cybersecurity program/policies/procedures and make recommendations for solving any information security and operational risk related issues. Ensure that bank policies/procedures compliance with external requirements.Monitoring and detection of any violation of the bank's security. Develop and implement an Incident Reporting and Response System to address branch security and incidents (breaches), respond to alleged policy violations, or complaints from external parties.Develop and implement an ongoing risk assessment program targeting information security / Cybersecurity and privacy matters; recommend methods for vulnerability detection and remediation and oversee vulnerability testing and scanning.Serve as Secretary of the Information Technology and Security committee.Successfully complete required annual Branch BSA/AML training.Knowledge & Experience Requirements:Bachelor's degree or equivalent; Advanced degree in computer science or information system related, or IT background is preferred.Typically requires 10+ years relevant experience.Certifications: CISSP, CISA, or CISM desirableStrong knowledge of computer-based risk management systems relevant to the types of business activities to be conducted by the Branch.Strong knowledge of government regulations such as GLBA, Cybersecurity RegulationsExperienced with implementing guidelines such as FFIEC, NISTCapability Requirements:Good writing and communication skills.Good analytical and problem solving skills.High attention to details.Job Dimensions:Employees: oversee 1–2 team membersPay: $160,000- $180,000/per year (Base Salary)#J-18808-Ljbffr