Lead the Bank's security operations function, partnering with Information Technology (“IT”) and Information Security (“Infosec”) to ensure the effective implementation of security controls across identity, endpoint, cloud and monitoring environments. Oversee security-related projects, coordinate operational resources and staff while maintaining an audit-ready control environment that supports the Bank's security, compliance and risk management objectives.

• Operate and continuously improve security operations processes across identity, endpoint and cloud security administration.
• Manage monitoring and alert triage workflows, coordinate investigation and response with stakeholders.
• Ensure least-privilege access, role-based access control and access review practices are executed and evidenced.
• Oversee endpoint security configuration, patch compliance reporting, and baseline enforcement.
• Coordinate Azure security configurations, logging, monitoring controls and remediation activities.
• Execute changes through formal change management with documented rollback and peer review.
• Support incident response activities, including containment coordination and evidence collection.
• Support audits and examinations by producing evidence, responding to requests, and remediating findings.
• Maintain current standard operating procedures and runbooks while ensuring knowledge transfer to staff.
• Provide leadership, oversight and professional development for a team of employees, ensuring alignment of individual performance with departmental goals and strategic objectives.

• Bachelor's degree in Information Security, Computer Science or equivalent experience required.
• Minimum of 6 years of experience in security operations, identity and access management, endpoint security or related domains required; managerial experience preferred.
• Relevant cybersecurity certifications, such as CompTIA Security+, Microsoft Azure Security Engineer Associate (AZ-500), Microsoft Security Operations Analyst Associate (SC-200), or Microsoft Identity and Access Administrator Associate (SC-300), preferred.
• Experience with the Microsoft security stack, including Microsoft Entra ID, endpoint management and security and Azure security controls required.
• Understanding of Zero Trust principles and role-based access control required.
• Experience supporting audits in regulated financial services environments required.
• Proficiency with Microsoft Office applications required.
• Excellent written and verbal communication skills.

WORKING CONDITIONS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Regular attendance and punctuality are essential functions of every job. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential functions.

Perform routine and typical tasks of an office such as typing, taking notes, reading/reviewing, computer work, filing, copying, answering phones, etc. that may require employee to view, stand, stoop, kneel, or crouch and lift.

Position requires flexibility and willingness to be available to work generally during normal business hours, but can include early mornings, evenings and weekends; participation in after-hours maintenance windows may be required based on operational needs.

The successful candidate will be required to prove on the first day of work that they are legally authorized to work in the U.S. The Bank will not sponsor a candidate for a visa or for work authorization.

COMPENSATION:  $130,000 TO $165,000