Manager, Information Security II – Administrative Services Management

Information Security Manager II (Administrative Services Management) is a SME and supporting role in the Information Security program under Administration Services Management vertical. This senior role enages multiple security teams within the Information Security function across a matrixed environement to implement effective security programs to protect the bank, our clients and IT systems in a complex, highly regulated environment. The Information Security Manager is both a security thought leader and will provide governance over delivered RBC services for financials, KPIs, cost benchmarking, strategic alignment, and facilitating necessary City National administrative BAU such as approvals and HR matters as necessary.

Additionally, the role will support the centralization of security BCP Plans by engaging with domain leads for Information Technology, Information Security, Disaster Recovery & Business Continuity, Infrastructure, Data Quality, Performance & Scalability, and Change Management & Development Practices to obtain technical domain advice as appropriate. The role will also support the centralization of security vendor risk engagements to ensure standardization and quality assurance and tracking of vendor issues.

• The SME communicates effectively with IT and business management, including senior executives and board-level committees on key cyber security topics.
• Develops clear, actionable goals and objectives for the team, coaching, training and leadership to the team, and provides written and verbal updates to senior IT and business leadership, as well as routinely interfaces with external partners in law enforcement, regulatory agencies and the intelligence community.

Must-Have*

• Bachelor’s Degree or equivalent
• Minimum 10 years of experience working in Information Security or relevant IT roles with increasing responsibility
• Minimum 5 years of experience designing and implementing cyber security or IT solutions or risk programs within a complex IT or highly regulated environment
• Minimum of 5 years or more in a position of leadership for major IT projects or teams, with security focus

Skills and Knowledge

• Demonstrated success in leading projects or teams in a large, IT environment, particularly one in a highly-regulated or controlled environment
• Demonstrated record of accomplishment in one or more areas of cyber security subject expertise, including access and identity management, security engineering and architecture, security operations, threat and vulnerability management or cyber risk management
• Ability to communicate clearly and professionally with all levels of an organization.
• Excellent verbal and written communication skills.
• Proficiency in multi-tasking and prioritizing projects.
• Excellent time management skills and be accustomed to working within prescribed deadlines.
• Demonstrated mastery of one or more areas of cyber security expertise
• Demonstrated experience as a team or project leaders in a complex IT environment
• Demonstrated knowledge of cyber security policies and standards in a highly regulated environment
• Formalized training or certification in one more areas of cyber security specialization
• Excellent communication and interpersonal skills. Including a strong ability to create positive and professional business relationships with partner engineering and architecture teams across IT
• Strong commitment to talent development, training and coaching to acquire and retain key security talent
• Master’s degree in business or computer science is highly desired.
• Advanced security certifications or extensive formalized training
• 5 years or more in a position of leadership for major IT projects or teams, preferably with security focus