Information Security Officer

Responsibilities

• Support a group/team in developing business insight for focused information security risk discussions
• Provide guidance on information security topics, policies and controls
• Contribute to the ongoing information security initiatives and improvements development, implementation and maintenance of information security for the line of business (LOB)
• Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for the line of business (LOB)
• Provides guidance and advocacy regarding the prioritization of LOB investments that impact information security
• Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs
• Monitors information security trends internal and external to the bank and keeps LOB/CIO Partners informed about information security-related issues
• Drives GIS/LOB risk deliverables
• Collaborates with risk partners on info security critical priorities
• Participates in senior LOB specific Risk Management & Business Continuity Routines
• Identifies and measures global information security (GIS) controls on most critical business processes or channels

• 2-5 years of experience in technology and 5+ years in information security
• 2-5 years of experience in application development or application security
• Experience working on cloud implementations in Microsoft Azure, Amazon Web Services and Google Cloud Platform environments
• Must display subject matter experience in application security, vulnerability testing, system testing, and/or Agile lifecycle management
• Strong LOB knowledge/experience for the type of business they are aligned to (e.g. CSBB/GBM)
• 1-2 years of risk management experience or direct participation in risk management processes, including application risk classification and application control assessments.
• Experience giving presentations and superb communication skills
• Bachelor's and/or Master’s degree in Computer Science, Information Technology or related field

Demonstrates expertise in information security, application security, and risk management, with a strong focus on cloud implementations and compliance. Capable of providing strategic guidance and insights to enhance information security initiatives within the line of business.