This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Cybersecurity Incident Response Team Lead is a leadership role responsible for leading and enhancing the bank’s Security Operations strategy. The Cybersecurity Incident Response Lead will oversee the incident response and threat intelligence programs to safeguard critical assets and data. The ideal candidate will combine technical expertise, operational efficiency, and a strategic mindset to mitigate risks and ensure compliance with regulatory requirements. This role requires exceptional leadership, technical skills, and communication skills to drive cross-functional collaboration and instill a culture of security across the organization.
Job Responsibility:
Develop and execute a comprehensive security operations strategy aligned with the bank's risk appetite and business objectives
Provide thought leadership on emerging cyber risks and recommend proactive measures to mitigate them
Serve as a trusted advisor to executive leadership, management committees, and the board on cyber risk issues
Define, maintain, and report operational metrics to evaluate Security Operations program performance, effectiveness, and adherence with organizational and regulatory requirements
Direct and manage Americas Cyber Security Incident Response Team (CSIRT) to ensure timely monitoring, detection, and response to threats
Lead the development and execution of the bank’s incident response plan and associated playbooks
Coordinate responses to security incidents, ensuring minimal impact and quick recovery
Establish and maintain a threat intelligence program to proactively identify and respond to emerging threats
Evaluate, implement, and optimize security processes and technologies to enhance detection and response capabilities
Collaborate with IT and engineering teams to integrate security into systems and processes
Stay updated on emerging technologies and recommend solutions to address evolving threats
Ensure adherence to cyber risk management regulations, including FFIEC and other applicable laws
Represent the bank during regulatory examinations, audits, and executive presentations on cyber risk topics
Maintain thorough documentation to demonstrate adherence to policies and standards
Build and mentor a high-performing security operations team
Provide training and development opportunities to ensure team members stay current in the field
Foster a culture of accountability, collaboration, and continuous improvement
Requirements:
Bachelor’s degree in Cybersecurity, Information Technology, Business Administration, or a related field
Minimum 10+ years of experience in information security or related field
Ability to analyze, prioritize, and manage security incidents effectively
Ability to align cyber risk initiatives with business objectives
Strong ensure thorough documentation and clear communications over security operations activities
Proven track record of building and leading high performing teams
Expertise in navigating banking regulations
Strong knowledge with information security technologies such as SIEM, SOAR, EDR, NDR, etc.
Strong knowledge with leading security investigations
Deep understanding of frameworks such as NIST Cybersecurity Framework
Proficiency in drafting and enforcing policies, procedures, and playbooks
English
Nice to have:
Advanced degree (MBA, MS) is strongly preferred
Relevant industry certifications (CISSP, CISM, GIAC) are strongly preferred
At least 3 years of experience in a senior leadership role within the banking or financial services industry
Industry Thought Leadership: Recognized as a subject matter expert in the cybersecurity or risk management space