Information Security Analyst

I. 3rd Party Risk Management:

• Assist in developing and maintaining the 3rd Party Risk Management Procedure.

• Manage and maintain 3rd Party processes, including regulatory expectations, risk assessments, gap analysis, and process improvements.

• Conduct periodic evaluations and assessments of 3rd Party vendors, including onboarding and offboarding processes.

• Maintain and conduct periodic 3rd party awareness training for key stakeholders.

• Prepare key metrics for Management and Committee reporting.

• Assist in preparing audit materials as requested by the Internal Audit Division.

II. Operational Risk and Regulatory Reporting:

• Continuously enhance the Branch’s operational risk management.

• Review RCSA (Risk and Control Self-Assessment) of each group upon changes and conduct annual reviews.

• Track and record Operational Risk Reporting to monitor and analyze incidents and confirm preventive measures.

• Identify, measure, review, aggregate, monitor, or control operational risks within the risk appetite for US operations.

• Report operational risk management to senior management and various committees.

• Assist USCRO in overseeing CRM activities and determining key risk indicators.

• Produce monthly reports summarizing operational risk incidents and RCSA results for senior management.

III. Information Security:

• Act as a secondary/back-up to perform Information Security tasks, reviews, and user administration.

   

   

• Bachelor’s degree in information security, Computer Science, or a related field.

• Knowledge of 3rd Party Risk Management.

• Knowledge/experience in Operational Risk Management.

• Familiarity with Windows, Windows servers, Active Directory, and AS400 platforms.

• Knowledge of security tools such as Anti-Virus, Vulnerability Scanner, and SIEM software.

• In-depth understanding of Information Security Administration.

• Professional Security certification is a plus.

• Knowledge of information security-related topics such as FFIEC, NYDFS Part 500, ISO 270XX, etc.

LOCATION:

Manhattan, NY

Hybrid work setting: 2 days in the office per week.

We sincerely apologize, but due to a high volume of applicants, only those who successfully pass the initial screening will be contacted. We truly appreciate your understanding.

#LI-JACUS　#LI-US　#countryUS