AVP Information Security Strategy (Banking)

Governance

• Establish and maintain Information Security policies and procedures
• Ensure CISO roles and responsibilities are clearly delineated and documented to ensure efficiency, create synergies and ensure TISR is being properly managed across first and second lines

Stragtegy & Programs

• Coordinate Information Security strategy in alignment with the Bank’s strategy
• Maintain strategic initiatives tracking and associated KRIs to track progress and execution of the objectives
• Conduct quarterly strategy reviews with the CISO team to ensure alignment and momentum continue. Adjust strategy as necessary

Risk & Compliance

• Establish and enhance a TISR framework that consists of the appropriate components to effectively manage TISR
• Conduct risk assessments of TISR for Projects, Third-Party, New Activities and Applications
• Prepare response evidence for IT/IS related regulatory exams
• Recommend changes to policy, process or procedures to align with OCC and other federal guidelines and regulations

Metrics & Reporting

• Manage all metrics and reporting for CISO

• Bachelor’s degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required
• Minimum 5 years of work experience in Financial services Risk Management, Audit, IT/IS Operations, or other relevant functions
• Minimum 3 years of experience in developing and executing IT/IS Risk programs, projects, and policies
• Minimum 1 year of experience working with US Banking Regulations, financial industry standards, and industry standard IT/IS Risk Frameworks
• Strong program, frameworks, project management development, implementation, and maintenance skills
• Sound and practical IT/IS risk management and program knowledge
• Familiarity with IT/IS Risk Management regulations, standards, and frameworks including NIST, ISO27002, FFIEC Guidelines, etc.
• CISSP/CRISC/ or IT related certifications preferred