Senior Manager, US IT Security Analyst - 5

Reason: Backfill for a Senior Manager who has an upcoming leave, and this contingent worker is required to fulfil those responsibilities, Business group: The role sits within the Office of the U.S. Chief Information Security Officer (CISO) and supports the U.S. Cybersecurity Program. The team is responsible for ensuring compliance with U.S. cybersecurity and cyber risk regulatory requirements while providing oversight across multiple security domains. The group is accountable for monitoring the effectiveness of security controls, managing cyber risk, and ensuring security processes operate as intended. The team consists of approximately 14 resources located across Canada, Dallas, and New York. Project: Client is seeking a dynamic and experienced cybersecurity professional to join its Enterprise Security U.S. department. This role is ideal for a strategic thinker and hands-on individual contributor who thrives in a regulatory-driven environment and is passionate about improving cyber and IT risk processes. The successful candidate will play a key role in the U.S. Cybersecurity Program, helping drive oversight, coordination, and execution across a broad range of cybersecurity priorities that protect the Bank and support business growth. This individual will work hand-in-hand with enterprise security and technology teams to drive progress in key security areas such system governance and management.

Typical Day in Role: Application / System Governance:

• Lead the U.S. Program for application inventory quarterly review processes
• Meet with IT Stakeholders to identify business and technology use of application, understanding details regarding configurations, application management and change management processes.
• Categorize technology into appropriate groupings and help facilitate Application Portfolio Management updates alongside the Application Owners.

SBUS Cyber and IT Advisory:

• Review and support key US cyber and technology issues through closure. Provide cyber and risk expertise for management action plan creation and remediation activities.
• Identify and correct pitfalls in existing remediation/planning/closure.
• Aid in reduction of failed issue closures and reduction in overall issues.
• Provide white glove assistance to Issue Owners where warranted.
• Understand key technologies and processes within a given set of subdomains (mainly Vulnerability Management with exposure to other security technology functions and sub-domains, and general system management) to assist technology owners with understanding a sustainable solution.
• Provide oversight of control activities in given set of subdomains, including but not limited to Vulnerability Management and IAM
• Discuss, challenge, and support Control Owner’s discussions with Quality Assurance Teams, 2nd line, and 3rd line review
• Serve as the primary liaison for U.S. IS&C teams, supporting issue inquiries.
• Global Collaboration and General Accountabilities:
• Collaborate with global cyber and issue management colleagues to support initiatives.
• Collaborate with Technology stakeholders
• Collaborate with Front Office / CIB / Other corporate functions
• Provide in-depth SME insight and knowledge sharing to Cyber and Risk colleagues
• Manage deliverables within the assigned domains

Candidate Value Proposition:

• This is a highly visible role offering broad exposure across multiple cybersecurity domains within a major financial institution.

The successful candidate will have the opportunity to:

• Lead oversight activities for a critical cybersecurity function.
• Own and drive vulnerability management initiatives across the U.S. environment.
• Influence cybersecurity strategy, governance, risk mitigation, and operational improvements.
• Partner with senior leaders across Security, Technology, and Risk functions.
• Make a measurable impact on the Bank’s cybersecurity posture and risk management capabilities., Experience review and overall fit assessment Round 2: Technical Panel Interview (60 minutes) Hiring Manager + 2 panel members Scenario-based discussions Deep dive into cybersecurity experience Technical and domain knowledge assessment

1) 10+ years of proven experience in IT, cyber security or cyber risk 2) Strong knowledge and experience with understanding vulnerability details and vulnerability management practices 3) 3+ years’ experience with system architecture and general sysops (e.g. configuration, patching, IAM, automation, orchestration, golden images, cloud, etc.)

Nice-To-Have Skills: 1) Strong knowledge of application security preferred 2) Previous development / scripting experience is a plus (Python, back-end development) 3) Data analysis experience is a plus (Excel, SQL) 4) Experience from FIs or major tech companies (e.g. Meta) would be an asset

Soft Skills Required:

• Effective verbal and written communication skills required
• Attention to detail
• Team-player

Education:

• Certifications such as CISSP, CCSP, GCP/AWS certifications, OSCP, or equivalent are strongly preferred, * Brings deep, hands-on experience in vulnerability management and technical security operations.
• Has practical experience managing vulnerabilities, system configurations, patching programs, IAM controls, and related technology risk activities.
• Demonstrates strong technical depth alongside cybersecurity risk and governance knowledge.
• Holds one or more relevant industry certifications.

Average Candidate

• Primarily focused on high-level governance, risk, and compliance (GRC) activities with limited hands-on technical experience.
• Has theoretical cybersecurity knowledge but lacks practical vulnerability management or systems administration experience.