Manager Cyber Risk At Leading Investment Bank Job in Skillventory

Job Description

Roles and Responsibilities

Key Responsibilities

• Managing Security Threats:
  • Analyze systems, protocols, interactions, and data to identify and response to active security threats in the environment.
  • Collect, analyze, and report on malicious software and phishing messages targeting internal assets to understand the capabilities and indicators of compromise.
• Security Design:
  • Prepare documentation for technical controls and processes associated with information security solutions
  • Work on IT Security analysis and exceptions on a case-by-case basis

• Security Assessments & Reviews:
  • Perform regular IT Security reviews of all IT assets
  • Perform Firewall Rule reviews
  • Engage in Cybersecurity projects, Application Security Reviews, etc.
  • Conduct IT Security reviews of Data Centers, Bank Branches, Workstations
  • Perform Risk Assessments on new & exiting business solutions, infrastructure setup & applications
  • Support in the execution of Internal Risk Controls
  • Write Standard Operating Procedures in a structured format
  • Follow-up on closure of findings/observations from Secure Code Reviews & Penetration Testing,
  • Follow-up with IT Teams on Patching, Anti-Virus Updates, removal of non-standard assets, asset hardening, etc.
• Access Management:
  • User Access Management such as removal of Toxic Access Combinations, removal of elevated privileges

• Cybersecurity Awareness:
  • Perform IT Security Awareness and Trainings

• Audit Programs:
  • Assist end-to-end in Internal Audits, Regulatory Audits, External Audits
  • Engage in Cyber Drills, Red Team exercises
• Incident Management:
• Create and improve upon existing response, triage, containment, and recovery processes.
• Work closely with other technology personnel to ensure the security of the environment and remediation of security events
• Continually monitor for policy violations or incidents and actively participate in remediation

• IT Risk & General Controls
• IT Security / Cyber Security / Cyber Risk Management
• In-depth understanding of IT Security technologies & concepts
• Good communication skills
• Team Player