To Apply for this Job Click Here
Job Ref: 15204
Salary: $65000 – $150000
AVP Information Security Strategy (Banking)
Located on-site in Manhattan
Base salary $65-150k depending on skills and experience
Provide Strategy, Programs, Governance, Risk, and Compliance functions as required to fulfill information security program requirements.
Responsibilities:
Governance
- Establish and maintain Information Security policies and procedures
- Ensure CISO roles and responsibilities are clearly delineated and documented to ensure efficiency, create synergies and ensure TISR is being properly managed across first and second lines
Stragtegy & Programs
- Coordinate Information Security strategy in alignment with the Bank’s strategy
- Maintain strategic initiatives tracking and associated KRIs to track progress and execution of the objectives
- Conduct quarterly strategy reviews with the CISO team to ensure alignment and momentum continue. Adjust strategy as necessary
Risk & Compliance
- Establish and enhance a TISR framework that consists of the appropriate components to effectively manage TISR
- Conduct risk assessments of TISR for Projects, Third-Party, New Activities and Applications
- Prepare response evidence for IT/IS related regulatory exams
- Recommend changes to policy, process or procedures to align with OCC and other federal guidelines and regulations
Metrics & Reporting
- Manage all metrics and reporting for CISO
Qualifications:
- Bachelor’s degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required
- Minimum 5 years of work experience in Financial services Risk Management, Audit, IT/IS Operations, or other relevant functions
- Minimum 3 years of experience in developing and executing IT/IS Risk programs, projects, and policies
- Minimum 1 year of experience working with US Banking Regulations, financial industry standards, and industry standard IT/IS Risk Frameworks
-
Strong program, frameworks, project management development, implementation, and maintenance skills
-
Sound and practical IT/IS risk management and program knowledge
-
Familiarity with IT/IS Risk Management regulations, standards, and frameworks including NIST, ISO27002, FFIEC Guidelines, etc.
-
CISSP/CRISC/ or IT related certifications preferred
#acgresourcesjobs
Please contact Franca Diona at 646-442-2272
Franca@acgresources.com