Officer, Senior Information Security Engineer

Description

BANC OF CALIFORNIA AND YOUR CAREER

Banc of California, Inc. (NYSE: BANC) is a bank holding company headquartered in Los Angeles with one wholly-owned banking subsidiary, Banc of California (the “bank”). Banc of California is one of the nation’s premier relationship-based business banks focused on providing banking and treasury management services to small, middle-market, and venture-backed businesses. Banc of California offers a broad range of loan and deposit products and services, with full-service branches throughout California and Denver, Colorado, as well as full-stack payment processing solutions through its subsidiary, Deepstack Technologies.

The bank is committed to its local communities by supporting organizations that provide financial literacy and job training, small business support, affordable housing, and more.

At Banc of California, our success is driven by our people, and we take pride in fostering an environment where everyone can reach their full potential. We embrace a culture of empowerment, progressive thinking, and entrepreneurial spirit, ensuring our team members have an opportunity to make an impact and play an important role in the future of Banc of California. Our core values – Entrepreneurialism, Operational Excellence, and Superior Analytics – empower us in creating a dynamic and inclusive workplace.

We are committed to supporting your growth and well-being with comprehensive benefits, career development programs, a variety of employee resource groups, and more. TOGETHER WE WIN

THE OPPORTUNITY

Responsible for all aspects of cyber security operations including architecture, design, configuration, deployment, operation and management of cyber security tools, systems and processes. The position is involved with the implementation and maintenance of data security systems in both on premise and cloud environments. Performs all duties in accordance with the Company’s policies and procedures, all U.S. state and federal laws and regulations, wherein the Company operates.

HOW YOU’LL MAKE A DIFFERENCE

• Builds, supports, monitors and enforces the security posture of the Bank using next-gen firewall, IDS/IPS, endpoint protection, DLP, encryption, SIEM, vulnerability management and other technologies and processes.

• Conducts / coordinates security control audits, identifies potential gaps/risks and participates in the remediation of same.

• Establishes and maintains Security Operations team triage and incident response playbooks to protect and recover information assets from unauthorized access, modification or destruction.

• Assist in developing and implementing technical security standards to support the Bank’s security needs and regulatory requirements including ISO
  2700x, CFPB, SOX, GLBA, NIST, FFIEC and PCI.

• Provide subject matter expertise in all areas of Information Security technical operations, including analysis of computing environment, security testing and documentation, as well as investigations, software research, emerging technology research, vendor security analysis and participation in periodic audits.

• Execute a reliable first-line-of defense via documented processes, controls, templates, and rigors.

• Evaluate effectiveness of security testing and training, including penetration testing, security awareness training, and phishing campaigns.

• Keeps abreast of the latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to the Bank, and modify security control structure as required.

• Maintains advanced knowledge and awareness of information security trends within the financial industry.

• High level of personal integrity, the ability to professionally handle confidential matters, and project the appropriate level of urgency, judgment, and maturity.

• Treat people with respect; keep commitments; inspire the trust of others; work ethically and with integrity; uphold organizational values; accept responsibility for own actions.

• Demonstrates knowledge of and adherence to EEO policy; shows respect and sensitivity for cultural differences; educates others on the value of diversity; promotes working environment free of harassment of any…