Information Security Manager

FinWise Bank is a commercial institution located in Murray, Utah that offers exceptional products in a manner that continually surpasses expectations. Information Security is a vital part of the Bank’s structure, and the Risk and Compliance Division supports the Bank in these efforts. The Information Security Manager will work closely with the VP, Information Security Officer (ISO), to promote Information Security standards, controls, and best practices across the Bank. This role will be primarily responsible for conducting due diligence reviews of existing and potential third parties with access to the Bank’s sensitive data. These reviews will be tracked in the Bank’s Third-Party Risk Enterprise Platform. This role will also have oversight activities of the Information Technology Division. This will be accomplished by monitoring security measures for the protection of computing networks and data delivery systems used throughout the Bank.

Tasks:

• Develop strong and collaborative professional relationships with the Third-Party Risk Management and Cyber Security teams.
• Review and assess the security posture of third parties by evaluating submitted evidence and requesting additional documentation when appropriate.
• Create, modify, and enhance Information Security procedures and provide them to the ISO for review and approval.
• Execute assigned Information Security tasks in a timely manner.
• Escalate observed security issues or deficient third parties to the ISO.
• Complete user access reviews of assigned Bank systems.
• Conduct clean desk reviews at Bank premises.
• Communicate relevant process issues to the ISO to improve efficiency.
• Conduct investigations of security incidents leveraging the Bank’s security tools.
• Ensure that security incidents associated with the Bank, or third parties are documented.

Knowledge, Skills, and Abilities:

• Manage concurrent activities with tight deliverables and a strong attention to detail.
• Ability to handle highly confidential information and material in a professional manner.
• Ability to communicate technical information in a manner comprehensible by individuals at varying degrees of experience and skill levels.
• Outstanding technical security background as well as thorough understanding of relevant risk mitigation and technical controls following industry best practices from NIST, CIS, etc.
• Ability to remain aware of current security threats, trends, and topics to support the security posture of the Bank.
• Self-motivation and eagerness to learn.
• Excellent written and verbal communication skills.

Required Education / Experience / License:

• BA/BS in a related subject (or equivalent professional experience)
• 3+ years of experience in Information Security
• 2+ years of experience in the financial services industry
• At least one entry-level security certification (e.g.: Security+, CCOA, SSCP, etc.)

Preferred Education / Experience / License:

• Master’s degree in a related subject
• At least one intermediate-level security certification (e.g.: CySA+, CISA, CCSP, etc.)

• At least one expert-level security certification (e.g.: CASP+, CISM, CISSP, etc.)

Minimum Essential Requirements:  

• Sit or stand at a computer for extended periods of time and look at a computer screen for several hours a day.
• Work at