SUMMARY:
Provide leadership for the Security Operations team to drive process level efficiencies, reduce and identify security threats, and escalation of critical security events. This position will work closely with each manager in Information Technology and Risk Management to guarantee security best practices at each phase during a technology service lifecycle.
SUPERVISOR RESPONSIBILITIES:
Responsible for the overall direction, coordination and evaluation of the staff. Carries out supervisory responsibilities in accordance with the organization's policies and applicable laws. Responsible for evaluating performance, rewarding and disciplining employees, addressing complaints and resolving problems. Responsibilities include recruiting, interviewing, and assisting with hiring, coaching and training employees. Other responsibilities involve planning, assigning and directing work.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Leads, mentors, and develops the Security Operations team while establishing goals aligned with Information Security and Information Technology objectives.
Promotes continuous improvement, accountability, and professional development through coaching and knowledge sharing.
Develops and maintains Security Operations procedures, workflows, and incident response playbooks.
Plays a crucial role in Security Engineering and Operations technology budgeting, strategic planning, licensing, and vendor relationships.
Ensures Security Operations practices align with organizational risk tolerance, regulatory requirements, and industry frameworks.
Oversees security monitoring, alert triage, threat detection, investigations, and operational effectiveness.
Manages cybersecurity incident response efforts and serve as the primary escalation point for significant security events. Coordinate resources, provide technical guidance, and facilitate collaboration to expedite investigation, containment, remediation, and recovery activities.
Partners with Security Engineering and senior leadership to optimize security platforms, monitoring capabilities, and operational readiness.
Partners with senior leadership, Security Engineering, Threat Intelligence, and Information Technology teams to improve security capabilities, technology integrations, and overall security maturity.
Partners with senior leadership with developing and maintaining Security Operations standards, documentation, roadmaps, and technical requirements.
Supports security assessments, audits, regulatory examinations, and compliance initiatives.
Participates in cybersecurity, business continuity, and disaster recovery planning efforts.
Supports enterprise security awareness and education initiatives.
Serves as a trusted advisor on operational security matters throughout the organization and provide strategic recommendations to senior leadership regarding security technologies, risks, and improvement opportunities.
Develops and reports on key metrics related to Security Operations effectiveness, platform health, project progress, and risk reduction.
OTHER REQUIREMENTS:
Banking is a highly regulated industry and you will be expected to acquire and maintain a proficiency in the bank's policies and procedures, and adhere to all laws, rules and regulations that are applicable to your conduct and the work you will be performing. You will also be expected to complete all assigned compliance training in a timely manner.
Hands-on experience with developing and maintaining security event response procedures.
Strong understanding of event tuning practices.
Strong understanding of security best practices related to one of the following: Network Security, Operating System Security, and Data Security.
Experience with Intrusion Prevention Devices, Next Generation Firewalls, and Web Security Appliances or Services.
In-depth technical knowledge of enterprise networks and systems.
Proven operational success and management experience.
Familiarity with technology management frameworks (ITIL, COBIT, NIST) a plus.
Willingness to respond to emergencies.
Stability under pressure.
Pleasant personality and appearance.
Willingness to work additional hours if needed.
Ability to work independently with minimum supervision.
Ability to handle other duties as assigned.
Bachelor's Degree in Computer Science or other computer-related field and a minimum of three years of related experience and/or training; or equivalent combination of education and experience.
Technical certifications in the Information Technology related to networking, security, systems, databases preferred (Cisco, Microsoft, Comptia, Citrix, Oracle, (ISC)2).
