Partner with technology teams to safely store sensitive identity/credentials in approved vaulting solutions
Execute established processes for vaulting identities/credentials in vaulting applications
Provide oversight on manual credential management processes throughout the enterprise
Serve as a subject matter expert and guide technology teams to configure applications to systematically retrieve credentials from approved solutions
Develop requirements for compliance and operational metrics to measure the overall health of the non-human identity program
Maintain an advanced awareness of bank security policies and government regulations pertaining to information security
Formulate and implement information security solutions and controls
Make decisions and resolve issues regarding changes to information security policy, standards, and procedures as needed for systems, applications, and tool
Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation
Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
Act as more experienced lead to the organization to develop security risk awareness and mitigating actions
Consult the organization on complex security issues and findings
Manage the most complex and critical information assets
Evaluate and interpret internal and companywide information security policies, processes, standards, and participate with more experienced leaders in decision making on information security
Serve as information security lead to advise on the development and delivery of Information Security Education and Awareness
Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals
Lead projects and teams
Serve as a mentor to less experienced staff
Requirements
5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of IAM (Identity and Access Management) experience
2+ years of process improvement experience
3+ years of IAM experience with industry standard credential management solutions (CyberArk, HashiCorp Vault, etc)
2+ years credential management for service accounts/non-human accounts
2+ years of information security architectural design and consulting experience
2+ years of access management and provisioning within public cloud platforms such as Azure and GCP
Experience communicating and presenting complex information to multiple levels of the organization
Strong time management skills and ability to meet deadlines
Ability to work effectively, as well as independently, in a team environment
Experience with synthesizing data from multiple sources and presenting it in appropriate formats
Knowledge and understanding of information security management, audit, compliance and risk.
Knowledge and understanding of financial services industry: compliance, risk management or audit operations
Knowledge Information Security Frameworks and standards (FFIEC, NIST, ISO) experience
Knowledge of Microsoft office tools such as PowerPoint, Excel, Outlook and Word.
Benefits
Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
Information Security AnalysisIdentity and Access Management (IAM)Credential ManagementInformation Security Architectural DesignAccess ManagementProcess ImprovementRisk ManagementInformation Security FrameworksComplianceData Synthesis
Soft skills
Time ManagementCommunicationTeamworkMentoringProblem SolvingLeadershipConsultingCollaborationDecision MakingPresentation Skills