Information Security Specialist

Job Description:

1.       Governance and Control Implementation: Oversee and ensure the successful implementation of governance and control responsibilities supporting the Enterprise Risk Framework, Operational Risk Management Framework, and all applicable requirements within the Enterprise Business Continuity and Crisis Management policy and standards.

2.       Risk Awareness and Ownership: Foster a collaborative culture that emphasizes risk awareness and ownership, applying a consistent approach to business continuity and resiliency risk management. Ensure strong adherence to the 1B Standards and other related issues or standards, such as the Operational Resilience Standard.

3.       Program Management: Manage the quality and timely execution of risk and control program activities, including business continuity planning, preparedness, business impact analysis, exercises, and the overall exercise strategy and testing.

4.       Incident Management Support: Support the P&T Incident Management Protocol and operationalize standard requirements documentation.

5.       Knowledge Development: Develop and maintain comprehensive knowledge of the P&T mandate, focusing on the interaction between various capabilities and their enterprise-wide impact. Collaborate with partners across P&T and TD as necessary.

6.       Risk Assessment Collaboration: Work with specialized areas to conduct risk and control assessments and prepare high-quality 1B risk assessment or profile reports for senior executives and Risk Committees as needed.

7.       Project Participation: Participate in complex, comprehensive, or large projects and initiatives.

8.       Expert Resource: Serve as a lead expert in technology controls and information security for project teams, the business, and external vendors.

9.       Advanced Knowledge: Possess advanced knowledge of organizational, technology controls, security, and risk issues.

Qualifications:

1.       Experience: 7+ years in technology risk management, technology cyber assessment, and/or technology systems management.

2.       Business Continuity and Crisis Management: Strong experience in business continuity and crisis management.

3.       Holistic Assessments: Deep understanding of holistic assessments with experience in operational resilience concepts, approaches, and tactics.

4.       Risk and Governance: Previous experience in risk and governance is preferred.

5.       Interpersonal Skills: Very strong interpersonal skills and relationship-building abilities.

6.       Facilitation Skills: Strong facilitation capabilities.

7.       Communication Skills: Highly developed verbal and written communication skills.

8.       Productive Challenge: Ability to challenge in a productive manner.

9.       Banking Industry Knowledge: Knowledge of the banking industry and the regulatory environment.

10.    Problem-Solving: Proven ability to break down problems and opportunities into logical parts and develop plans to address them.