IT Security Manager – BISO Team Lead

IT Security Manager – BISO Team Lead

Requirements

• Bachelor’s degree in information security or related field.
• 7-10 years in information security, with 3-5 years in a stakeholder engagement role.
• Knowledge of security technologies (encryption, data protection, secure configuration, privilege access, etc.)
• Experience in IT infrastructure, Cloud and emerging technologies.
• Knowledge of networks technologies (protocols, design concepts, access control, engineering).
• Proactive in building and fostering relationships across all levels of the organization, including executives.
• Strong business acumen, leadership, risk management and communication skills.
• Strong decision-making and problem-solving skills. Demonstrated experience in handling complex situations and the delicate balance between security and business enablement.
• Comfortable handling multiple priorities, establishing goals, and implementing protocols for LoB and key stakeholder engagement in a fast-paced environment.
• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization.
• Strategic mindset to understand the cyber risk trends and plan with stakeholders to remediate the root cause.

Responsibilities

• Serving as the primary cyber security expert for US-focused LoBs, creating awareness on FIS security policies and requirements and sector hot topics, and being an overall security advisor to the business.
• Building relationships with the LoBs, leading monthly touchpoints, and working with the LoBs to drive risk remediation across security focus areas.
• Co-leading a centralized policy exception team, bringing strong technical knowledge across network, cloud, infrastructure, applications etc. to analyze, triage and conclude on risks related to exceptions. Overseeing evaluation of risk action plans and driving risk decisions balancing security risk to FIS while enabling the business.
• Working with key stakeholders to drive LoB compliance with internal security policies and assisting with US and global regulatory frameworks, including CCPA, GDPR, PCI-DSS, and other relevant standards.
• Conducting cyber risk assessments of business-led initiatives, products or technology development, and providing recommendations for remediating risk.
• Communicating security policy, standards and requirements changes and impacts to the LoBs and relevant stakeholders and facilitating effective change management.
• Working closely with the Cybersecurity team to ensure that LoB information security strategies complement cyber risk management practices.
• Partnering with IT, Legal, Compliance, Risk and other teams to implement comprehensive security solutions, ensuring effective protection and alignment with business priorities. Evaluating projects and contracts for alignment with security requirements.
• Acting as the security SME for clients, particularly in the financial sector, and helping them understand FIS’ security capabilities and how FIS protects client data.

Preferred Qualifications

• CISSP, CISM, CISA, or equivalent preferred.
• Strong knowledge of financial regulations and industry standards. Experience in the financial sector is desirable.
• ServiceNow and Archer platform experience.