Senior Manager Cyber Security - Defensive

Zions Bancorporation's Enterprise Technology and Operations (ETO) team is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients and colleagues with the best experience possible for over 150 years. Help us transform our workforce of the future, today.

Senior Manager Cyber Security - Defensive

As the Senior Manager Cyber Security - Defensive, you would play a key role in defending the enterprise from malicious actors and improving our security posture. We operate in a fast-paced, information-driven environment, which means we need people who bring diverse experiences, perspectives, and expertise to meet ever-changing demands. Your ability to adapt, learn, innovate and collaborate with a dynamic team helps us provide exceptional service to our customers and communities.

The Senior Manager Cyber Security - Defensive will report into the Director, Cybersecurity Operations and is responsible for leading a technical team to analyze the cyber environment and develop security measures to safeguard the confidentiality, integrity, and availability of information. The manager will work closely with other managers across Cyber, as well as partners across Technology and the business.

Responsibilities

• As a hands-on working manager, the leader will focus on continuous monitoring, alerting, escalation, and response of suspicious activities including research indicators of compromise, continuous configuration, SIEM customization, and logging requirements for technical assets

• Support a team of dedicated cybersecurity engineers and analysts in their responsibilities for 24/7 monitoring, incident response, internal investigations/forensics/eDiscovery, and logging infrastructure

• Manage the Security tooling (e.g., EDR, SIEM, etc.) including overseeing the deployment, integration and configuration of all new security solutions and of any enhancements to existing security solutions in accordance with industry-leading practices generally and the enterprise's security requirements specifically

• Deliver after-action facilitation and action/remediation oversight

• Provide development, education, and oversight of relevant standards, procedures, and playbooks for completeness and accuracy including leading tabletops and simulation exercises, Security Incident Management Framework

• Continuous monitoring, alerting, escalation, and response of suspicious activities

• Provide coaching, constructive feedback, workload management and direction to staff to ensure successful achievement of projects and initiatives

• Develop procedures and guidelines to support consistent delivery of services

• Consult with cybersecurity and technology colleagues to continuously evaluate and implement security solutions

• Communicate potential security concerns/exposures to appropriate leadership

• Coordinate and collaborate with business organizations and other IT groups to ensure quality solutions are delivered within project timelines and to facilitate an enterprise wide understanding of security goals, to solicit feedback and foster cooperation

• Maintain up-to-date knowledge of the cyber and information security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors

• Ensure adequate and effective technical and non-technical controls exist to meet current and future security compliance requirements found in local, state, and federal laws and regulations

• Identify/recommend tools, processes, software, and hardware to maintain leading-edge cybersecurity capabilities. Manage supplier relationships for technology, software and services, including contracts, roadmaps, vendor support and performance

Requirements

• 5+ years of experience in cyber security in an enterprise environment, which may include some or a combination of roles in IT, cyber security, risk, compliance, audit, threat detection, data privacy, etc. Prefer experience managing 24/7 enterprise technology or cybersecurity production environments

• Experience managing a team and/or coaching team…