Cyber Risk & Security Strategy Manager - Executive Director

Company: SMBC Group
Location: White Plains
Posted on: June 12, 2020

Job Description:

The Cyber Risk and Security Strategy Manager reports directly to the CISO and is responsible for defining the information security strategic roadmap for the America's Division by interfacing with core business functions and technology teams to identify required future state security capabilities. He/She will be working with internal information security teams to secure the threat landscape while considering strategic risk areas of the organization.ResponsibilitiesA strong technical background will enable comprehensive strategic conversations with technical audiences, while building confidence with business stakeholders and company leadership when assisting in defining and promoting our strategic vision.Core focus on supporting and developing cyber security vision and roadmap with immediate attention to:Organizational transformation to integrate and elevate cyber security controls, risk management and governance within the SMBCAH Inc. holding company entities and combined US operations.Customer facing cash management system authentication strategy and design; PSD2 support.Privileged Identity Management and RBAC StrategyAutomation and orchestrationInformation Security representative for newly established Fraud CommitteeCyber risk reporting and visualization for the Risk Committee and Board of DirectorsWork hand in hand with security program management and tactical deployment teams to ensure alignment with strategy and vision.Maintain regular engagement and proactive partnership with business and technology teams to ensure assigned strategies align with business and technical needs, requirements, and constraints.Contribute to the collective information security planning to ensure that future security investments are aligned appropriately when considering key priorities such as business requirements, industry threat landscape, and risk appetite.QualificationsThis role requires skills and experience related to information security strategy planning, security architecture design and review, and effective communication and presentation skills.To be successful in this position you must have the following skills and qualifications:15+ years of experience in information security or information technology disciplines.Bachelors degree in Computer Science or related field, or equivalent work experience.Proven experience and desire to operate as a self-starter and be comfortable working in an highly regulated organization.Proven ability to map and understand complex relationships and interactions between Enterprise Architecture, business direction, emerging trends, emerging technologies, and legacy systems.Knowledge of information security principles, frameworks and best practices and how those principles support cyber Strategy and Vision.Strong technical knowledge and confidence in communicating with highly technical audiences.Proven ability to pull a diverse group of individuals with different goals together to facilitate, moderate, and influence productive discussions driving towards results.Must be familiar with the Three Lines of Defence model, Audit and Risk Management processes, as well as oversight by external regulators and third parties.Highly meticulous and detail orientedComfortable working in a highly matrixed environmentExcellent speaking, writing and influencing skills are required as the opportunity often presents or interacts verbally or in written form to IT, business leadership, auditors and external regulators.Excellent analytical and problem solving skills.

Keywords: SMBC Group, White Plains , Cyber Risk & Security Strategy Manager - Executive Director, Executive , White Plains, New York