Senior Information Security Manager – Cyber Defense Management

Responsibilities

• Manage and develop a team of individual contributors and managers in roles with moderate complexity and risk
• Maintain a broad awareness of the state of information security company wide
• Identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion and development, and implementation of vulnerability mitigation strategies
• Identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services
• Identify, formulate, implement information security and Line of Business management
• Determine appropriate strategy for information security policy, standards and procedures for systems, applications and tools
• Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
• Advise more experienced management on issues with high, critical impact
• Collaborate and influence all levels of professionals including more experienced managers
• Lead team to achieve objectives
• Interface with Information Security Industry Leaders, Financial industry Leaders, Analysts and Regulators
• Manage allocation of people and financial resources for Information Security Analysis
• Develop and guide a culture of talent development to meet business objectives and strategy
• Own consistent execution and governance of highly visible, mandatory cyber risk and control functions across the Cyber Defense domain
• Drive effective execution of risk assessments, control testing, and challenge activities across all three lines of defense
• Manage CDM issue management coordination, and control maturity progression
• Oversee control operation for processes which span CDM teams
• Produce recurring executive level reporting and leadership updates translating cyber risk, control health, metrics, and trends into clear business context
• Coordinate and implement assigned projects and initiatives
• Play key role in executing Risk and Control Self-Assessment activities in partnership with Risk Assessable Unit (RAU) owner and Control management teams
• Ensure Cyber Defense compliance with enterprise policies, standards, metrics, risk treatments, and issue remediation expectations
• Build and sustain a culture of accountability, talent development, and continuous improvement across the team
• Establish and track performance goals and operational metrics for self and team
• Monitor team deliverables to ensure timeliness, quality, and alignment with expectations
• Oversee resource allocations to ensure commitments align with strategic objectives
• Maintain a broad awareness of the state of information security across the enterprise and industry
• Influence and oversee changes to information security policies, standards, and procedures, ensuring alignment with Enterprise Risk Management and required functions including Business Continuity Planning (BCP)
• Advise leadership or executive management on issues with high impact on the company
• Recommend mitigation strategies for identified security risks
• Support internal and external audits, regulatory reviews, and third-party assessments

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of management or leadership experience
• Expertise across core Cyber defense domains including Incident Response, Data Loss Prevention, OSRT, CTI, and Endpoint Security solutions
• Demonstrated ability to lead cross-functional initiatives, drive workflow integration, and prioritize enterprise-level initiatives
• Strong leadership skills with the ability to foster a collaborative, high-performance team culture grounded in continuous learning and improvement
• Excellent written, verbal, and executive-level presentation skills
• Proven leadership in highly regulated environments with strong project and program management capabilities
• Relevant industry certifications such as CISM, CISSP, CSSLP, GSLC or equivalent
• Master’s degree or equivalent bachelor’s in information technology, Cybersecurity, Computer Science, or related discipline (or equivalent professional experience and certifications)
• Ability to leverage AI to enhance efficiency and innovation

• Information Security Analysis
• Incident Response
• Data Loss Prevention
• OSRT
• CTI
• Endpoint Security
• Vulnerability Detection
• Threat Data
• Network Intrusion
• Vulnerability Mitigation Strategies

• Leadership
• Collaboration
• High-performance team culture
• Continuous learning
• Project management
• Program management
• Communication
• Influencing
• Accountability
• Performance tracking

• CISM
• CISSP
• CSSLP
• GSLC
• Equivalent certifications