Senior Information Security Analyst - Pelham Berkeley Search

High Profile Bank in Manhattan seeks an Senior Information Security Analyst (Officer level - AVP).

Tremendous full-time direct hire career opportunity with International Organization that offers a great work environment, interesting projects and competitive compensation (130-140K+ bonus).

In summary:

• Develop and manage information and cyber security related activities and projects in a key leadership role as you will be the second most senior individual in the information security risk group.
• Acts as an Information Security subject-matter-expert to support and assist with providing guidance to Senior Management on information and cyber security issues.
• Reviews and proposes practical changes to potential and existing Information Security policies, procedures, practices, and guidelines to ensure regulatory compliance.
• Coordinates and manages the employee information security awareness training program.
• Assess and evaluate Information Risks by conducting annual risk assessment, vulnerability Assessments and special risk assessments for new information risk related processes and trend analysis of key information risk measurements.
• Work with IT and coordinate any incident response to cyber security events.
• Reviews vendor service level agreements and contracts to provide guidance on information and cyber security protective controls and countermeasures.
• Develops and maintains information risk Key Risk Indicators (KRI's).
• Performs key Information Risk Governance related tasks including provides user access control management oversight; monitors, analyzes, and follows-up on Information Risk events/issues; Reviews information risk and proactively advises as necessary on: IT Projects/Issues Management process, Change Management Process, Significant changes to IT procedures, IT Asset Management Report, Key IT Vendor Contracts, IT Disaster Recovery Plan/Process, Record Retention Process, and Internal or external audit findings.

Requirements include:

• 5+ years of related Information Risk Governance experience with extensive Information Security / IT Audit.
• Information security certification (CISSP)
• Strong understanding of Information Risk assessment concepts and principles as they relate to risk tolerance and business risk exposure.
• Financial industry experience and understanding of financial industry structure and concepts.
• Completed Bachelor's degree.
• Knowledge and expertise in Risk Assessment and Risk Analysis.
• In-depth knowledge of Information Technology and ability to analyze and design Information Security monitoring process.

risk assessment, monitoring, vulnerability, information security, governancerisk assessment, monitoring, vulnerability, information security, governance