Cyber Defense Officer

Exact compensation may vary based on skills, experience and/or education, and location. This position is also eligible for an annual bonus.

SUMMARY

The Cyber Defense Officer is a strategic role within Information Security that plays an integral part in cybersecurity and resilience of the bank's systems and serves as a key advisor to business units, driving the implementation and optimization of cybersecurity practices that align with the organization's risk posture. Reporting directly to the Chief Information Security Officer (CISO), the Cyber Defense Officer is responsible for identifying, assessing, and mitigating cyber risks while managing threat intelligence, vulnerability, and issues management programs. The Cyber Defense Officer must also have extensive knowledge and understanding of business processes and mitigation strategies to address identified risks in technology and business processes through direct involvement with the business units.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Conducts cyber risk assessments to identify vulnerabilities, threats, risks, and evaluate the effectiveness of existing controls.
• Analyzes emerging threats, cybercrime trends, and third-party risks to develop mitigation strategies with stakeholders
• Maintains and enhances the threat intelligence program to monitor for vendor, data, or system compromises.
• Leads the Cybersecurity Incident Response Program, including the development and maintenance of response procedures (SOPs)
• Oversees the Issues Management program to track and remediate identified security issues.
• Manages the vulnerability management program including performance tracking, governance, and risk impact analysis.
• Monitors and reports on cybersecurity Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to inform leadership and drive accountability.
• Manages the GRC platform for Information Security, ensuring compliance with internal policies and regulatory requirements.
• Reviews and/or assists in the development and monitoring of security policies, standards, guidelines, diagrams, and procedures to ensure ongoing maintenance, identify gaps and/or recommendations.
• Complies with and stays abreast of all policies and procedures, federal and state laws applicable to the job. Assess Information Security requirements and present recommendations in compliance with Bank and Regulatory requirements.
• Provide, present, and promote the Citizens Experience to all external and internal customers.
• Other duties as assigned.

SUPERVISORY RESPONSIBILITIES

This position has no supervisory responsibilities.

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EDUCATION and/or EXPERIENCE

Bachelor's degree (B. A.) in Information Security, Computer Science, or a related field; or four years of related experience; or equivalent combination of education, certifications, and experience.

Experience with the NIST Cybersecurity Framework (CSF) 2.0 or Cyber Risk Institute (CRI) Profile is a plus.

LANGUAGE SKILLS

Ability to read, analyze and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.

MATHEMATICAL SKILLS

Ability to work with mathematical concepts such as probability and statistical inference, and fundamentals of plane and solid geometry and trigonometry. Ability to apply concepts such as fractions, percentages, ratios, and proportions to practical situations.

REASONING ABILITY

Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.

COMPUTER & SOFTWARE SKILLS

To perform this job successfully, an individual should have extensive knowledge with security technologies, such as firewalls, intrusion detection/prevention systems, endpoint protection solutions, data loss prevention solutions, threat intelligence platforms, SIEMs, SASE, CASB, and encryption solutions.

Experience with GRC Platforms such as Archer, MetricStream, ServiceNow is a plus

CERTIFICATES, LICENSES, REGISTRATIONS

• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified Enterprise Defender (GCED)

OTHER SKILLS and ABILITIES

• Must possess essential knowledge of relevant state and federal laws and regulations.
• Excellent organizational and time management skills are essential.
• The following skills and experience are relevant and preferred
  1. Banking experience
  2. Compliance & Risk management
  3. Stakeholder relationship management
  4. Project coordination

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the associate is regularly required to talk or hear. The associate is frequently required to stand; walk; sit; and use hands and fingers to handle or feel. The associate is occasionally required to reach with hands and arms, and stoop, kneel, crouch or crawl. The associate is regularly required to operate a computer keyboard, mouse, calculator and telephone and reach with hands and arms. The associate must occasionally lift and/or move up to twenty-five (25) pounds.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an associate encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The work environment is usually moderate.

Salary Range:$87,612.00 To $124,846.00 Annually