Overview

This position manages Information Security (IS) resources, processes and actions within the Bank. Partners with peers, stakeholders, and senior leadership to identify strategies that improve information security data protection and align with enterprise goals. Oversees identification and mitigation of data loss gaps, security risks, and unauthorized access. Promotes understanding of industry practices, technology, and evolving data loss threats to enhance defenses for the Bank's
information systems and resources. Provides leadership and expert consultation on data loss matters to enterprise-wide initiatives or committees. Leads projects to produce effective results.

Responsibilities

• Security Strategy - Works with leadership to develop information security data protection strategy, roadmaps, and technological direction. Leads change management, resource planning, and other activities with significant impact on existing data protection security framework. This role will establish a Sensitive Data Governance service line/program
  that services the holistic Data Protection Program based on NIST and CSF. Responsible for oversight and management of the Sensitive Data Governance service line including developing and maintaining the risk controls required for the bank's sensitive data, ongoing identification of data loss gaps and security enhancements. Expertise in Data Classification, Sensitive Data Elements and Taxonomy required.
• Program Management - Oversee and update the bank's data protection standards and policies as appropriate. Advise on the development, enhancement, and monitoring of Insider Threat, Data Loss Prevention, Data Classification teams and its technologies. Develops complex solutions and process improvements. Ensures compliance with all applicable requirements and service standards.
• Managerial Functions - Establishes and monitors expectations to achieve company and department goals. Makes appropriate changes to team policies, procedures, and efficiencies in order to meet objectives. Manages the performance, training, and evaluation of assigned staff. May be responsible for budgeting or vendor management.
• Security Resource - Acts as a consultative resource to business and corporate functions on data loss policies, technological programs and the bank's associates. Advises on internal teams and externally owned policies and procedures. Provides training, coaching, and mentorship to develop security awareness and protect Bank assets.