Manager Information Security

Company

Federal Reserve Bank of PhiladelphiaWhen you join the Federal Reserve—the nation’s central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We dedicate more than $1 billion to technology each year to support the Federal Reserve and our economy, and we’re building a dynamic and diverse team for our future.
Bring your passion and expertise, and we’ll provide the opportunities to challenge you and propel your growth—along with many benefits and perks that support your health, wealth, and life. In addition to a great compensation package, we offer a comprehensive benefits package that includes tuition assistance, paid time off, top-notch health care benefits, child and family care leave, professional development opportunities, a 401(k) match, pension, and more. All brought together in a flexible work environment where you can find balance.
The Federal Reserve Bank of Philadelphia is one of the 12 regional Reserve Banks that, together with the Board of Governors in Washington, D.C., make up the Federal Reserve System. It helps formulate and implement monetary policy, supervises banks and bank and savings and loan holding companies, and provides financial services to depository institutions and the federal government. The Federal Reserve Bank of Philadelphia serves eastern and central Pennsylvania, southern New Jersey, and Delaware.

Job Summary:

Reporting to the AVP IT Services and Information Security, Officer, you will protect the confidentiality, integrity, and availability of the Bank’s information assets and computing systems from intentional or inadvertent modification, disclosure, or destruction. You will, develop, implement, and maintain an information security program to ensure the protection of the Bank’s information and computing resources. Implement, administer, and lead a comprehensive information security assurance or operations strategy.

What You Will Do:

• You will be an Inspiring resource manager, accountable for managing, leading and mentoring others. You may be accountable for any of the following Information Security (IS) functions: 7x24 Local Incident Response Team (LIRT), Forensic evaluation, Data Loss Prevention (DLP), Vulnerability management, Operational troubleshooting, and Information Security metrics reporting, Cybersecurity training and awareness, Product and software security evaluations, Security capability development, Vendor security reviews, Phishing test coordination, and Insider Risk evaluation.
• Implement and administer a comprehensive information security assurance or operations strategy.
• Manage technically experienced individuals by performing normal management responsibilities of staffing, planning, controlling, and directing; review and evaluate performance; review employment candidates; recommend salary increases and promotions for the Information Assurance Security unit; and prepare budget for area of supervision. Resource manager accountable for the Information Security staff, including hiring, coaching, and helping the staff progress through their careers.
• Manage a comprehensive, business aligned, threat and vulnerability management program. Conduct threat modeling and analysis activities of business processes and current/potential IT solutions. Advise partners of methods to fix vulnerabilities, institute compensating controls and request risk acceptance.
• Analyze, designs, and implement business processes and requirements to ensure compliance with security policies and procedures. Following approved security frameworks, advises information security colleagues and business clients on information security requirements, compliance responsibilities and methods to protect Bank resources and sensitive information. Tasked with managing our IT security policy
• Provide consulting to all levels of Bank management to support their overall information security related activities.
• Develop and track metrics and measures to substantiate efficacy of the program.
• Coordinate team activities: including policy implementation, incident handling, communication, and records keeping.
• Oversee the applicability of evolving IS technologies. Ensure compliance with government and industry information security policies and practices.
• Consult with information system owners to categorize systems; select, implement and assess controls; and frame, assess and monitor risk.
• . Fulfill job duties and responsibilities in conformance with sound safety practices.
• You will oversee direct reports.

What You Have:

Technical Skills:

• Excellent risk management, enterprise defense, consulting and external "threat awareness" competencies.
• Experience of different automated security control systems, encryption, message authentication, vulnerability assessment, intrusion detection, penetration testing, incident response, and manual control procedures.
• Working knowledge of security systems associated with computing platforms, networking, operating systems and applications.
• Strong analytical, planning, problem solving, organizational, project management skills and the ability to multi-task well.
• Apply risk management frameworks such as NIST 800-37 is required.
• Use automated Governance, Risk and Compliance tools to track artifacts of the risk management lifecycle.
• Strong leadership, planning, problem solving, and organizational skills.
• Excellent interpersonal and communications skills (oral, written and presentation) including the ability to communicate with all levels of Bank and FRS management.
• Demonstrated ability to lead, inspire and manage resources.

Education and Experience:

• Bachelor’s degree in computer science, Information Systems, or other related field or equivalent work experience expected.
• Minimum 5 years’ experience in the Information Technology field, with preferably at least 3 years working directly in an information security capacity and 2 years in a supervisory or leadership role.
• Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM) or similar Information Security certifications expected.

Other Requirements:

• Travel 5-15% of the time.
• You have must have the ability to obtain and maintain a National Security Clearance (Secret or Top Secret). US Citizenship is required to be eligible for a National Security Clearance.

The salary grade for this position is: Grade 17. Final salary and offer will be determined by the applicant’s background, experience, and skills, and internal equity and alignment with market data.

We offer a great benefits package that features:

• Medical (4 options), Prescription, Dental (3 options), and Vision Insurance with no waiting period
• 401k/Thrift Plan with generous employer match
• Employer-funded Pension Plan
• Paid Vacation/Sick Time & Holidays
• Monthly $100 Commuter Allowance
• Flexible Spending Accounts and Healthcare Spending Accounts
• Flexible Work Schedule available in most departments
• Life Insurance and Long Term Disability Insurance
• Tuition Reimbursement (undergraduate and graduate)
• Parental Leave
• Free onsite 24/7 Fitness Center including training classes, Peloton bikes and locker room / shower facilities
• Onsite Cafeteria & Coffee Shop
• Additional Convenience Benefits, Discounts and More…

Additional Information:

• The Federal Reserve Bank of Philadelphia takes your information privacy seriously. Federal Reserve Bank of Philadelphia staff will only email you from the “@phil.frb.org” domain or through the Workday system “[email protected]”.  If you are initially contacted by phone, feel free to request that the caller provide you with their email address to validate their identity.  If you have any questions about the validity of someone who contacts you regarding this position, please email the Talent Acquisition team at [email protected].
• The Federal Reserve Bank of Philadelphia believes that diversity, equity and inclusion among our employees is essential to our success as an organization, and we want to recruit, develop and retain the most accomplished people from a diverse candidate pool. To support a workplace culture of belonging, we offer eight employee resource groups (ERGs) and a 100 percent rating on the Human Rights Campaign (HRC) Corporate Equality Index. The Federal Reserve Bank of Philadelphia is proud to be an equal opportunity workplace.
• We have eight employee resource groups (ERGs) to support a diverse workforce. Abilities (supporting disabilities and allies), African Heritage, Asian-Pacific, Freedom (supporting LQBTQ+ and allies), Talent Forward (supporting career growth), Women United, Working Families and Veterans. ERGs are open to all employees.
• We will ensure that individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job responsibilities, and to receive other benefits and privileges of employment. If you need assistance or an accommodation due to a disability, please email us at [email protected].
• All Federal Reserve Bank of Philadelphia employees must comply with the Bank’s ethics rules, which generally prohibit employees, their spouses/domestic partners, and minor children from owning securities, such as stock, of banks or savings associations or their affiliates, such as bank holding companies and savings and loan holding companies. If you or your spouse/domestic partner or minor child own such securities and would not be willing or able to divest them if you accepted an offer of Bank employment, you should raise this issue with the Recruiter for this posting, who can provide you contact information for our ethics officer if necessary. You should review the Bank’s Employee Code of Conduct to ensure compliance with conflict of interest rules and personal investment restrictions.
• Background investigations and drug testing are required for all new hires as a condition of employment, after the job offer is made. Candidates for positions deemed as "safety sensitive" will also be screened for the presence of marijuana. Employment may not begin until the Bank accepts the results of the background investigation.
• Due to the nature of the information, you will have access to, we require that you also complete a more in-depth enhanced background screening (Peraton moderate). 
• All employees will be subject to FBI fingerprint / criminal background and Patriot Act/ Office of Foreign Assets Control (OFAC) watch list checks at least once every five years.
• Certain eligibility rules apply. You will provide work authorization to prove your eligibility to work in the United States.
• The above statements are intended to describe the general nature, level of work and the requirements of this position. They are not intended to be an exhaustive list of all responsibilities associated with this position or the personnel so classified. While this job description is intended to be an accurate reflection of this position, management reserves the right to revise this or any job description at its discretion at any time.
• This is NOT a 100% remote opportunity. You will be available to work on-site in at least a hybrid capacity.
• Learn more about the Philly Fed and its culture. Learn more about working for the Philly Fed.

Full Time / Part Time

Full time

Regular / Temporary

Regular

Job Exempt (Yes / No)

Yes

Job Category

Information Technology

Work Shift

First (United States of America)

The Federal Reserve Banks believe that diversity and inclusion among our employees is critical to our success as an organization, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool. The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.

Always verify and apply to jobs on Federal Reserve System Careers (https://rb.wd5.myworkdayjobs.com/FRS) or through verified Federal Reserve Bank social media channels.

Privacy Notice