Chief Information Security Office - Security Services & Cyber Defense - Security Operation Center AVP

Bank Of China Security Operation Center ManagerThis incumbent will provide Security Operation Center services as required to fulfill the Bank's information security program requirements. This incumbent will provide real-time response and analysis to security threats across enterprise systems. In addition, this incumbent will provide support to Security Services & Cyber Defense, Governance, Compliance and Risk Management functions.

This position will also manage the SOC associates and lead the team to meet expectations. This position's schedule will rotate on a planned 8-hour shifts basis, covering 24 hours/day, 7 days/week, including overnight, weekend, and holiday.Security Operation CenterExecute incident response protocols for responding to and escalating incidents timely.Conduct initial incident response including containment, documentation, and communication.Conduct post-incident reporting and analysis. Maintain detailed and accurate records of security events and actions taken.Analyze security alerts and assess potential threats.

Stay updated on current threat landscape and emerging attack techniques.Team ManagementSupervise a team of SOC Associates during assigned shifts, ensuring task coverage and operational readiness.Enforce adherence to SOC Policies, Standards and Procedures and escalate deviations or issues as needed.Participate in the review and improvement of incident response Policies, Standards and Procedures.Security Services & Cyber Defense, Governance, Compliance and Risk AssessmentExecute Security Policies and Standards.Manage assigned security monitoring tools.Conduct vulnerability scans, patch management, Identity & Access Management, Penetration Testing, Data Privacy, Phishing and Training, Audit affairs and Risk Assessment as needed.QualificationsBachelor's degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is requiredMinimum 4 years of full time work experienceMinimum 3 years of work experience in Information security, cybersecurity, vulnerability management, security architecture, network, security tools and computer systems administrationMinimum 3 years of experience in risk managementGood understanding of regulatory requirements including FFIEC, GLBA, NISTKnowledge of Information security and cyber security best practicesKnowledge of systems administration such as Windows Server, Active Directory management, Firewall, UNIX system, network architectures, etc.Knowledge of security tools such as SIEM, DLP, XDR, EDR, Web Filter etcGood understanding of protocol behaviors, validity of identified vulnerabilitiesCISSP/CRISC/ or IT related certifications preferredPay RangeActual salary is commensurate with candidate's relevant years of experience, skillset, education and other qualifications.USD $65,000.00 - USD $150,000.00 /Yr.