Find Laws Find Lawyers Free Legal Forms USA State Laws
100,000's of Government Jobs
Search Government Jobs
Advanced Search

SENIOR MANAGER - INFORMATION SECURITY AUDIT

Job Field: Legal Jobs
Location: MONTEREY PARK, CA
Salary: $Not stated
JOB SUMMARY:
</tr>
<tr><td valign="top" width="450"><b>Title: SENIOR MANAGER - INFORMATION SECURITY AUDITLocation: CALIFORNIA-MONTEREY PARKInvest in your career. Invest in your future.At Union Bank, our people are our greatest asset. We are one of the largest banks in California with a longstanding reputation for professional training and career development. In addition to investing in our employees, Union Bank has established a generous community reinvestment program that works to uplift communities and watch them grow. We invest in a diverse workforce as our employees come from many different backgrounds, bringing with them different experiences and perspectives.Become part of a team where community, diversity, and exceptional service are part of everyone&#39;s job.Invest in you!SENIOR MANAGER - INFORMATION SECURITY AUDITMonterey Park, CaliforniaJob SummaryPerform IT Infrastructure Audit reviews, with a key focus on the Information Security area, and report on significant risk concerns in the Bank&#39;s Information Technology (IT) activities. Use a strong Information Security background to provide in-depth assessments of security activities and I.T. General Controls on key technical areas. Function as a participant as part of a larger team on integrated audits assessing specific business units. Perform as an Information Security specialist on related audit assignments. Interact with various technical and business unit managers and line personnel. Write clear, concise, non-technical and persuasive audit reports and other documents summarizing level of risk, scope, findings, recommendations, and the status of the issues. Direct and participate in special audits or project reviews.Major Responsibilities * Use technical understanding with key security areas to:* Review and analyze security policies, technical architectures, system configuration settings, monitoring packages and event logs, and interpret the results. Recurring activities include the execution of industry-standard security analysis, vulnerability assessment, and other scanning tools and analyze the results, when reviewing the Windows and UNIX operating systems as well as the IBM Mainframe, Active Directory, firewalls, intrusion detection systems, network devices, proxy servers, encryption practices, connectivity, databases, identity access and remote access solutions.* Assess the security posture of developed software and packages according to secure coding principles. Consider standard web-application vulnerability threats.* Consider the varied compensating security controls to conclude on the overall security of the enterprise. These multiple layers of controls include: multi-factor authentication, identity access management, remote access controls, endpoint protection, Security Event and Incident Management (SEIM), anomalous traffic monitoring, vulnerability and patch management, intrusion detection and prevention, data leakage protection (DLP), etc.* Use solid leadership skills to interact effectively with senior I.T. and business management.* Communication: Promote effective and open communication with all levels of personnel. Provide technical guidance to units on practices and control procedures. Clearly communicate issues to the appropriate level of Union Bank line management. Act as liaison for external auditors and examiners during the on-going or annual reviews.* Teamwork: Promote teamwork with Audit groups, as well as with other Union Bank units. Maintain effective working relationships with business-unit line management. Provide leadership, training, and guidance to other auditors.* Special Projects: Initiate and complete special project assignments such as due diligence examinations, task force projects or specific ad hoc reviews delegated by audit manager.* Bachelor degree in Information Systems, Computer Science, Business or related field degree.* Seven plus years of Information Security senior level or manager experience.* Possess a familiarity with key laws, regulations, and industry standards, such

KEY REQUIREMENTS:
Not stated
Tips