Information Security Lead

$100,000 - $120,000/Yr

Nesco Resource - Hauppauge, NY

Full-time - Mid Level

Hauppauge, NY

Administrative and Support Services

About the position

The Information Security Lead will be responsible for overseeing the information security policies and procedures within a financial services organization. This role involves collaboration with IT, Risk Management, and various business units to ensure compliance with security standards and to protect the company's information assets from threats. The position requires a proactive approach to security monitoring, vulnerability assessments, and the implementation of security systems and software.

Responsibilities

• Work with IT and Risk Management departments to develop recommendations for information security policies and procedures.
• Fulfill security monitoring oversight functions in support of the information security program.
• Oversee log and entitlement reviews of critical systems to protect company information assets.
• Ensure standard operating procedures are maintained to protect company information.
• Oversee regular vulnerability testing, social engineering testing, and security evaluations.
• Use metrics to measure and report on the effectiveness of information security controls.
• Assist in the development and maintenance of policies, standards, and procedures for information security risks.
• Work with business units and vendors to ensure compliance with policies and procedures.
• Coordinate the implementation and roll-out of Information Security systems and software.

Requirements

• 3 years of related experience
• Bachelor's degree
• Knowledge of financial services regulatory requirements (FFIEC, GLBA, NYSDFS)
• Hands-on experience with DLP Prevention tools and enterprise security tools (SIEM, vulnerability scanners, firewalls)
• Knowledge of banking operations and policy development
• CISSP (or comparable certification) preferred or expected within one year
• Hands-on experience with enterprise DLP tools (Varonis, O365 Defender)
• Experience with Palo Alto, FortiNet EDR, and Darktrace technologies
• Proficiency with information security testing and evaluation techniques
• Excellent oral and written communication skills
• Ability to work outside of normal business hours occasionally
• Superior knowledge of Microsoft Office and database management software

Nice-to-haves

• Experience with Vulnerability Management and Penetration testing tools (Rapid 7, Nessus, NMAP, Kali Linux)

Benefits

• Medical coverage
• Vision coverage
• Dental coverage
• 401K
• Employee Assistance Program (EAP)