Associate Director, Information Security
Purpose:
Under the general direction of the Chief Information Security Officer (CISO), the Associate Director of Information Security’s primary responsibilities include leading the centralized, coordinated management of the Information Security Program to achieve identified strategic objectives and goals. The ISM is tasked with planning, scheduling, executing and monitoring the program’s portfolio of projects, and directing the program’s operational model, including governance, compliance, risk management, access management and administrative activities.
The following statements are intended to describe the general nature and level of work being performed by persons assigned to the job. They are not intended to be an exhaustive list of all responsibilities or abilities required of persons so classified. The Bank reserves the right to alter or amend this description at any time.
Specific Responsibilities:
- Direct a cross-functional team of staff to drive performance and ensure the successful implementation of information security initiatives
- Actively manage programs and/or project portfolio, provide consistent program status and progress against objectives.
- Drive definition and closure of project requirements, project plans/schedules, and resource needs with stakeholders and within team resources
- Provide strategic and technical guidance for the design and execution of corporate, information technology and information security projects.
- Manage projects/activities that involve significant business and technical complexity.
- Champion & contribute to information security best practices and innovate & champion processes/methodologies at program level.
- Leading governance meetings and carrying ongoing oversight of Information Security Programs
- Lead in executing and maturing the Access Management and Security Awareness and Education Programs.
- Evaluate, measure, and report on strategic effectiveness of the Information Security Program
- Manage security awareness and education activities to deliver key security messages, inform the company about security tools and services, and engage Bank staff.
- Review and contribute to Program documentation and communication including, but not limited to, all communications, notices, guidance, directives, standard operating procedures, recommendations, and briefings.
- Continuously update Information Security Program management tools and processes to align with regulatory requirements and industry best practices.
- Present effectively to team and senior leadership regularly for feedback and collaboration
- Prepare and present executive level presentations, metrics, and status reports
- Design and author information security policies, procedures and standards
- Partner with various business units to enhance security policies/procedures.
Position Requirements:
- Bachelor's Degree in an information technology related field or equivalent experience.
- 5+ years of relevant Information Security work experience.
- 3+ years of managerial experience.
- One or more security certifications such as CISSP, CISA, CISM, or relevant security certification(s).
- Requires experience and proficiency in the information security field.
- Technical knowledge of implementing information security technical controls.
- Ability to successfully participate as the supervisor of the Information Security team.
- Strong analytical, prioritizing, interpersonal, problem-solving, and presentation, project management (from conception to completion) and planning skills
- Knowledge of risk management processes
- Knowledge of incident response and handling methodologies.
- Knowledge of resource management principles and techniques.
- Knowledge of information security program management and project management principles and techniques.
- Skill in creating policies that reflect security objectives.
- Develop detailed strategic recommendations to solve current and future security issues; identify protection gaps and propose effective mitigating strategies.
- Strong collaboration, teamwork, and relationship building skills across technical and business functions in the organization.
- Strong organization and documentation skills.
- Strong verbal and written communication skills.
- Self-motivated with critical attention to detail, deadlines and reporting.
- Must not have been convicted on any civil or criminal charge that would suggest a risk to Bank security
- Ability to work full-time.
- Ability to uphold and model the bank’s Guiding Principles.