Bank of China USA

Runs cross-border banking between the US and China

Cybersecurity Vice President

Security Operations & Incident Response +1Confirmed live in the last 24 hours

Full-timeNew York, NY, USA$110k - $230k /yrIn-person

About the Job

Requirements

A bachelor's degree in Computer Science or Risk Management is required.
At least 6 years of Information Security or Cybersecurity management experience within Financial Services is required.
A sound understanding of IT risk and control assessment methodology, information security frameworks, FFIEC Guidelines, SSAE 18, SP800-53, FIPS-199, and COBIT standards is required.
Strong communication skills and operational skills with Information Security tools are required.

Responsibilities

Lead the Cybersecurity management team to define the first-line Cybersecurity management process, methodology, and procedure, and oversee America Data Center cybersecurity-related activities.
Conduct periodic information security and Cybersecurity assessments, including information security controls and firewall rules, and follow up on remediation status.
Identify, assess, monitor, report, and follow up on key information security and Cybersecurity issues.
Recommend and implement IT solutions related to information security and Cybersecurity.
Assist in developing and implementing new security initiatives, including policies, processes, and awareness programs.
Manage and operate information security tools, including Nessus and Websense DLP.
Investigate and follow up on information security alerts generated from various security tools.
Oversee the Privilege ID process, including creation, access modification, and termination within America Data Center.
Assist the Department Head in managing contingency exercises and IT incident response processes.
Act as the point of contact with regulators and internal and external auditors.
Assist in preparing and reviewing documents requested by regulators and auditors.

Desired Qualifications

Auditor experience is preferred.
Bilingual ability in Mandarin is preferred.
CISSP and CISA certifications are preferred.

Introduction

Established in 1912, Bank of China is one of the largest banks in the world, with over $3 trillion in assets and a footprint that spans more than 60 countries and regions. Our long-term outlook, institutional weight and global breadth provide our clients with a stable and reliable financial partner, whether in Corporate or Personal Banking or our Trade Services, Commodities, Financial Institutions and Global Markets lines of business.

Overview

The incumbent will lead the Cybersecurity management team to define the 1st lineCybersecurity management process, methodology and procedure, and oversee AmericaData Center cybersecurity related activities. S/he will also be responsible for conductinginformation security assessments, vulnerability analysis, and implementing controls toaddress information security issues. In addition, s/he will monitor and report the Bank’sinformation security status, escalating major issues to management as necessary.

Responsibilities

Include but are not limited to:

Information Security/Cyber Security management

Conduct periodic information security/Cyber Security assessments (e.g., information security controls, FW rules) and follow up on remediation status
Identify, assess, monitor, report and follow up on key Information security/Cyber Security issues
Recommend and implement IT solutions related to Information security/Cyber Security
Assist in the development and implementation of new security initiatives, including policies, processes and awareness programs

Information Security Operation

Manage and operate information security tools (e.g. Nessus, Websense DLP, etc.)
Investigate and follow up the information security alerts generated from various security tools
Oversee Privilege ID process, including the creation, access modification, and termination within America Data Center
Assist the Department Head to manage Contingency exercises and IT incident response processes

Regulatory and Audit communication

Act as point of contact with Regulators and Internal/External Auditors.
Assist in preparing and reviewing all requested documents from regulators/auditors"

Qualifications

Bachelor’s degree required in Computer Science or Risk Management
Minimum 6 years of Information Security or Cybersecurity management experience within Financial Services required, auditor experience preferred
Demonstrate sound understanding of IT risk and control assessment methodology, information security framework, as well as FFIEC Guidelines, SSAE 18, SP800-53, FIPS-199, COBIT standards
Demonstrate strong communication skills, as well as operation skills of Information Security tools
Bilingual ability in Mandarin preferred
CISSP, CISA certification(s) preferred

Pay Range

Actual salary is commensurate with candidate’s relevant years of experience, skillset, education and other qualifications.

USD $110,000.00 - USD $230,000.00 /Yr.

Compensation: 110000 to 230000 (USD)

About the Company

Bank of China USA

Runs cross-border banking between the US and China

Bank of China USA, the US branch network of Bank of China, handles banking between the United States and China for companies, financial institutions, and wealthy individuals. It was the first Chinese bank in the United States and uses its parent's global network to connect clients with overseas banking services. Chinese companies operating in the US and Fortune 500 firms use it for corporate loans, trade finance, currency trading and cross-border cash management, paying interest and service fees, while individuals use its personal banking. The US network dates to 1981, when Bank of China, founded in 1912, reopened its operations with a branch in New York, where the US business is based.

Company size: 501-1,000
Company stage: Not listed
Total funding: Not listed
Headquarters: New York City, New York
Founded: 1981

Recently Posted Jobs

Explore more opportunities at Bank of China USA

See more jobs