Information Security Risk Officer

ABOUT BCI Bci provides financial services to individuals and corporations. We focus on being a global leader in innovations and personalized client experience and, with more than 10,500 employees, Bci is recognized as one of the best companies in which to work and develop a career. It is the third largest privately owned bank in Chile and it has more than 300 branch offices throughout Chile and representative offices in other countries.

Bci is an Equal Opportunity Employer – All qualified applicants will receive consideration without regard to race, color, religion, gender, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law.

Job Summary The Information Security Risk Officer is responsible for assessing and applying Information Security Risk knowledge and expertise to assist with Second Line of Defense activities to help strengthen the branch’s information security posture and ensure regulatory compliance. The Information Security Risk Officer enforces the implementation, monitors, and measures the adequacy of control systems in compliance with regulations and the Bank’s internal control framework and is responsible for identifying and reporting risk to local and corporate management and prompting actions to address it.

This includes reviewing, analyzing, and testing the proper implementation of physical, operational, and cybersecurity controls.

The duties of the position include but are not limited to the following:

• Provide guidance and direction to the team, including setting performance standards and supervising performance.
• Identify the developmental needs of subordinates by coaching, mentoring, and giving constructive feedback to improve their knowledge skill.
• Ensure adherence to laws and company policies and procedures and undertake disciplinary actions if the need arises. Ensures the adequacy of the cybersecurity and data protection controls and ensures they are in line with corporate policy, regulatory requirements, as well as best practices. Coordinate the implementation and management of the Branch’s Incident Response plans.
• Take part in the management of the Branch's Business Continuity Program.
• Serve as the branch’s designated Security Officer.
• Administers the branch’s physical security program and ensures it adequately protects all clients, vendors, and employees, assists staff, and interacts with members regarding security issues and ensures annual staff training.
• Provide effective challenge of strategy, day-to-day operations, and gap remediation with the goal to ensure adequate cybersecurity controls and methods.
• Provide services to affiliates in a satisfactory manner in accordance with the SLAs established.
• Contributes to the development and completion of the different operational risk mandates such as completing questionnaires, developing Key Risk Drivers and Key Risk Indicators, etc.
• Maintain and manage the Branch's Gramm-Leach-Bliley Act (GLBA) and Identity Theft Prevention programs as well as the Red Flags Rule including risk assessments, staff training, and control testing.
• Create the annual security plan and manage its execution.
• Liaise with the Head Office to develop the security programs.
• Be an active participant in special projects, as necessary.
• Stay current with relevant industry and regulatory standards and best practices via seminars, industry events, training, certifications, and/or licenses.
• Ability to understand, speak (fluently), read, and write English and Spanish.
• Ability to write routine reports and correspondence.
• Perform additional duties and responsibilities as assigned by management.

Compliance Responsibilities In the performance of their duties, all Bci - Miami Branch staff members are required to comply with all state and federal regulatory and legal requirements, including the Bank Secrecy Act, the Federal Election Campaign Act of 1979, the Foreign Corrupt Practices Act, and the Bank Bribery Amendments Act. Additionally, all staff members must comply with the Bci’s Personnel Manual and Code of Ethics and other policies of Bci which are either currently in place or which may become…