Information Security Engineer-W2

• Cybersecurity/Information Security Management
• Information Security specialty certification
• Secure coding and bug fix

• Vulnerability Scoring
• Security certifications

• 5+ years of Experience with Information Security standards
• Vulnerability identification and remediation experience
• Cybersecurity certifications a must

This role is responsible for completing and tracking compliance deliverables to ensure applications adhere to applicable policies and standards as well as local laws, rules and regulations (LRR). Key responsibilities include completing administrative and non-technical tasks related to compliance deliverables and infrastructure requests for the applications they support. They support vendors, development teams and technology managers to ensure technical security, risk, and other compliance activities are completed on time and per requirements.

These individuals partner closely with control functions, risk management and Global Information Security (GIS) and are familiar with the applicable policies, standards, LRRs, contacts and procedures so that the compliance deliverables are completed effectively and efficiently.

• Ensure that risk, security, and other compliance deliverables are completed on time and per requirements for the applications they support.
• Complete administrative and non-technical tasks related to compliance deliverables (for example, access reviews, assessments, questionnaires, procedural requirements, and so on).
• Assist with audit exams and risk assessments for the applications.
• Track and support the technical security and risk activities performed by the development teams (for example, remediation of non-permitted technology or security vulnerabilities, technical recovery planning, disaster recovery exercises, and so on).
• Maintain data about the application in systems of record.
• Work closely with vendors for vendor applications to ensure the application meets bank requirements.
• Assist with ad hoc inquiries and questions about the application.
• Interface with technology infrastructure teams for infrastructure requirements like requests for additional storage.

• Vulnerability management (~5000 findings at a given time with varying priority/criticality)
• Information Security standards adherence
• Cybersecurity tools knowledge and experience supporting a large organization’s application/infrastructure security.

• SWIFT Mandates (Messaging Standards) and other projects supporting SWIFT Application and infrastructure.