Information Security & Governance Manager

The Information Security & Governance Manager is responsible for managing vulnerability and security awareness programs for the organization.

• Manages Information Security governance responsibilities for committee reporting, exception management, policy management
• Risk evaluation, assessment and testing of applications, architecture, technologies, IS/IT programs, and staff
• Performs Information Security review of Third-Party Risk due diligence
• Coordinates and manages Incident Response tabletops
• Audit and regulatory request tracking and fulfillment
• Develop and manage the Bank's Threat Intelligence Program
• Integrate threat intelligence into enterprise risk management and governance frameworks

Qualifications:

• Bachelor's degree or equivalent work experience
• Experience in threat intelligence analysis, including the ability to collect, evaluate, and synthesize intelligence from multiple internal and external sources and translate finding into actionable insights that support risk management and executive decision-making
• Preferred: NIST Cybersecurity Framework, NIST 800-53, COBIT, FFIEC/OCC, SOC2, ISO27001, PCI

Skills:

• Working knowledge in the use of MS Excel and Word; basic keyboarding and calculator skills; must be able to perform simple math and carry out written instructions
• Work occasionally requires more than 40 hours per week to perform the essential functions of the job
• Lifting in an office setting up to 30lbs.