Senior Information Security Analyst

High Profile Bank in Manhattan seeks an Senior Information Security Analyst (Officer level - AVP).

Tremendous full-time direct hire career opportunity with International Organization that offers a great work environment, interesting projects and competitive compensation (130-140K+ bonus).

In summary :

• Develop and manage information and cyber security related activities and projects in a key leadership role as you will be the second most senior individual in the information security risk group.
• Acts as an Information Security subject-matter-expert to support and assist with providing guidance to Senior Management on information and cyber security issues.
• Reviews and proposes practical changes to potential and existing Information Security policies, procedures, practices, and guidelines to ensure regulatory compliance.
• Coordinates and manages the employee information security awareness training program.
• Assess and evaluate Information Risks by conducting annual risk assessment, vulnerability Assessments and special risk assessments for new information risk related processes and trend analysis of key information risk measurements.
• Work with IT and coordinate any incident response to cyber security events.
• Reviews vendor service level agreements and contracts to provide guidance on information and cyber security protective controls and countermeasures.
• Develops and maintains information risk Key Risk Indicators (KRI's).
• Performs key Information Risk Governance related tasks including provides user access control management oversight; monitors, analyzes, and follows-up on Information Risk events / issues; Reviews information risk and proactively advises as necessary on : IT Projects / Issues Management process, Change Management Process, Significant changes to IT procedures, IT Asset Management Report, Key IT Vendor Contracts, IT Disaster Recovery Plan / Process, Record Retention Process, and Internal or external audit findings.

Requirements include :

risk assessment, monitoring, vulnerability, information security, governance