Job Scope:

· Establish and enforce security policies to protect the Bank’s computer infrastructure, network and data.

· To reinforce the importance of information security, officers run training and awareness programs for employees.

· To develop policies that give managers and employees varying levels of access to corporate applications, system and data, and then monitor access to ensure compliance.

· Officer must minimize the risk of damage from security breaches by putting a business continuity or disaster recovery plan in place.

· Maintaining periodic self-inspections and relevant documentations.

· Work closely with Operations & IT Team on various business initiatives and projects.

Key Responsibilities:

· Support the Bank’s security program activities like conducting/facilitating applications security assessments, and providing application security consulting services to IT and other relevant stakeholders and users.

· Support project risk assessment from a technical security and information risk management perspective including intake, coordination, triage and review.

· Support assessment of current and potential vendors (e.g., software, hosting environments) from technical security.

· Support operational security activities including ongoing security processes (e.g., incident response, ad hoc queries, periodic access reviews, and vulnerability management).

· Support the development and enforcement of information security policies and standards; work with business units to implement security policies and process throughout the Bank.

· Informed on emerging technologies, key business drivers, and evolving threats.

· Conduct Cyber Security Self-Assessment as released by OSFI and seek Board of Directors’ approval annually.

· Prepare the IS dashboard material and attend monthly CISO meeting with Parent Bank Cyber Security Department.

· Coordinate and maintain periodic self-inspection documents and prepare need reports for management and Board review.

· Additional responsibilities as assigned.

Key Qualifications:

A bachelor's degree in computer and information technology or a related field, such as engineering or math.
At least 3-5 years of experience in information security, computer network penetration testing and techniques, or related fields.
Solid understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Strong written and verbal communication skills; comfortable interacting with individuals at all levels of the organization.
Related intermediate/advanced level information security certifications are a bonus but not mandatory.

Job Types: Full-time, Permanent

Salary: $23.00-$30.00 per hour

Benefits:

Extended health care
Paid time off
RRSP match

Schedule:

8 hour shift
Monday to Friday

Supplemental pay types:

Bonus pay

Education:

Bachelor's Degree (required)

Experience:

Information security: 3 years (required)

Work Location: In person

Application deadline: 2023-04-14

CTBC Bank Corp. (Canada)

New Jobs

Information Security Officer (Bilingual Mandarin preferred)