Information Security Manager

This is a Sr level role and requires International Banking experience and certifications such as CISSP, CISM, CRISC, CISA, GIAC and FFIEC experience. If you do not have 5 years of experience or at least one or two of the certifications listed, please do note reply to this position. An International Bank located in midtown NYC is seeking an experienced Information Security Manager for their growing Corporate Bank. Responsibilities Ensure adherence to Group-wide Information Security Policies, Standards, and Procedures, and the the identification, management, monitoring, and evaluation of information security risks are in line with internal policies and external regulations. Participate in industry forums, working groups, and professional organizations to maintain awareness of emerging security threats, trends, and best practices. Provide guidance and consultation to business and technology teams on information security matters. Formulate security requirements and review the risks on new applications and systems. Provide guidance and assessment to manage potential threats, incident response, and risks to information as technologies evolve. Assess requests for security policy exceptions and make recommendations to the ISO and/or senior management regarding disposition. Maintain, promote, and conduct the Information Security Awareness Program. Help define, manage, and maintain service and operating level agreements; support the relationships between the NY Branch, subsidiaries and representative offices, our Head Office, Third Party Service Providers, Vendors, and Managed Service Providers. Aid in the preparation of annual and quarterly information security reports and ad-hoc incident reports to Head Office. Qualifications Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Risk Management, or a related discipline Minimum 5 years of experience in Information Security, Information Risk Management, IT Governance, IT Audit, Cybersecurity, or related disciplines. Experience in Banking or Financial Services, or other highly regulated industries preferred Experience conducting information security risk assessments and reviewing security controls. Experience supporting audits, regulatory examinations, and remediation activities. Experience reviewing vendor due diligence documentation, including SOC reports and security questionnaires, preferred. Familiarity with multi-platform environments and their operational/security considerations Knowledge of security tools: Vulnerability Assessment Scanners, Intrusion Detection, Syslog Analysis, Anti-Virus, Encryption methodologies, Access Control and Entitlement Rights Management. Familiarity with banking regulations and good sense of industry best practices. Firm understanding of ISO 27001, 27002, and FFIEC IT Handbooks. Good written and oral skills – able to write reports and present results to Senior Management. Effectively able to communicate with peers explaining complex concepts or processes in layman’s terms. Professional certifications preferred, including CISSP, CISM, CRISC, CISA, GIAC, or Microsoft Azure Fundamentals #J-18808-Ljbffr The Horizon Group