Information Security Operation (VP level)

About the Role

We are seeking a seasoned Senior IT Information Security Operations Specialist for a leading international banking institute in New York City. This role demands a strategic thinker with comprehensive knowledge of information security practices and a proven track record of executing and maintaining security operations in a fast-paced, regulated environment. The ideal candidate will have 5-10 years of experience within the banking industry. Fluency in both English and Mandarin is highly desired to facilitate seamless communication across global teams.

Key Responsibilities

• Lead and Manage Security Operations:
  

  • Oversee day-to-day security operations, including monitoring, incident response, vulnerability management, and security assessments.
    
  • Manage and optimize security tools and technologies such as firewalls, IDS/IPS, SIEM systems, antivirus solutions, and encryption protocols.
    

• Regulatory Compliance:
  

  • Ensure compliance with federal and state regulatory requirements (e.g., FFIEC, GLBA, NYDFS, PCI-DSS, GDPR).
    
  • Prepare and present audit and compliance reports to internal and external stakeholders.
    

• Network and Infrastructure Security:
  

  • Design and implement security strategies for network, cloud, and endpoint protection.
    
  • Conduct security audits and penetration testing to identify and mitigate risks.
    

• Backup and Patch Management:
  

  • Manage backup and disaster recovery solutions to ensure data integrity and availability.
    
  • Oversee patch management to address vulnerabilities promptly.
    

• Risk Assessment and Mitigation:
  

  • Perform IT risk assessments, identify vulnerabilities, and develop mitigation plans.
    
  • Collaborate with IT and business teams to ensure security measures align with business objectives.
    

• Collaboration and Communication:
  

  • Work closely with internal IT teams, business units, and external partners to implement security policies and procedures.
    
  • Communicate security risks and action plans effectively to both technical and non-technical audiences.
    

• Continuous Improvement:
  

  • Stay updated on emerging security threats and best practices.
    
  • Recommend and implement enhancements to strengthen the security posture.
    

Required Qualifications

• Experience: 5-10 years of IT security experience within the banking industry.
  
• Education: Bachelor’s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.
  
• Regulatory Knowledge: Strong understanding of federal and state regulatory requirements affecting the banking sector.
  
• Technical Expertise:
  • Proven experience in network security, backup solutions, patch management, and IT risk assessments.
    
  • Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.
    
• Languages: Fluency in both English and Mandarin is highly desired.
  
• Communication Skills: Excellent verbal and written communication skills with the ability to interact with diverse teams globally.
  
• Certifications: Security certifications such as CISSP, CISM, CEH, or similar are a plus.
  

Key Competencies

• Strategic thinking and problem-solving skills.
  
• Ability to work independently and lead cross-functional teams.
  
• Strong organizational skills and attention to detail.
  
• Ability to manage multiple projects and prioritize effectively.