Desc
The CIB CTC Wholesale Payments Information Security Manager will be responsible for managing the technology, operational and regulatory risks related to the Global Payments systems and Global Client Channels services.  The Wholesale Payments ISM will be expected to work cohesively with other CTC and CIB control functions, including but not limited to software developers, business control managers, compliance, internal audit & external regulators.
Responsibilities:
• Provide leadership to review, analyze impact of and implement technology controls to meet existing and new global regulatory requirements
• Assist in the development and implementation of the Firm’s technology policies, standards, procedures, control guidance and training
• Evaluate technology risks across the various Payment flows, including application design, development, testing practices, as well as technology control design, operation and validation
• Lead and participate in programs to evolve and improve the Wholesale Payments cybersecurity and technology control practices and control environments across CIB
• Help to develop a risk and control culture focused on the pro-active awareness and improvement of the Wholesale Payments control environments
• Provide governance and oversight of technology risk and controls in partnership with CIB Wholesale Payments technology executives, providing senior management with transparency on identified key risks, issue management and remediation activities
• Develop and maintain strong business and technology relationships, becoming a trusted partner, as well as building relationships with corporate functions such as Audit, Compliance, Risk and Corporate IT Risk teams
Skills/Experience
• 5+ years’ experience in technology or IT risk management, preferably for financial institution and/or strong background in IT Risk
• Dem onstrated knowledge of technology and application risk and controls management as a practitioner
• Knowledge of various control frameworks (e.g., FFIEC, COBIT, NEST)
• Experience in application security controls (design and/or execution)
• Knowledge of Software Development Life Cycle, control requirements and compliance assessments
• Strong project management and execution skills for driving enterprise-wide risk initiatives
RequisitionType Professional JobSchedule Full time