Head of IT Security

The Head of IT Security is a key leader within our CIB Americas IT organization to protect the bank assets.

He/she/they will be responsible for ensuring the highest standards of IT security, aligned with the regulatory frameworks established by the Federal Reserve Bank (FRB), the New York Department of Financial Services (NY DFS) and any other applicable Americas (CFTC, Canada, etc.) and European (ECB etc.) regulators.

This role is responsible for providing guidance, expertise on all IT Security, and Access Management activities for the Natixis CIB Americas platform.

 

The salary range for this position will be between $250,000 - $275,000.  Natixis is required by law to include a reasonable estimate of the compensation range for this role.  Actual base salary will vary and will be based on several factors including, but not limited to, relevant experience, education, skills set, applicable licensure and certifications, and other business and organizational needs.  Base salary is only one component of our total rewards package.  Natixis also offers a generous benefits package, and you may be eligible for a discretionary incentive award depending on company and individual performance.

 

Strategic Leadership:

• Develop and execute a comprehensive IT security strategy aligned with business goals, company policy, and regulatory requirements with the CIO CIB Americas guidance and coordination with Head Office IT Security (Natixis and BPCE Group).
• Provide strategic guidance to CIO CIB Americas and Senior Management on emerging cybersecurity trends and threats.

Regulatory Compliance:

• Stay abreast of FRB and NY DFS regulations, ensuring the bank’s IT security practices consistently comply with all requirements.
• Intersection with the Head Office, ensuring alignment with European Central Bank (ECB) regulations and Head Office standards, unless local US requirements supersede.
• Lead efforts to prepare for and respond to regulatory examinations and certification related to IT security in both the Americas and European jurisdictions.

Risk Management:

• Identify and mitigate cybersecurity risks to protect the bank’s critical assets and sensitive information, in line with the company policies.
• Implement and enhance IT Security solutions in line with the risk management frameworks to safeguard against evolving threats.

IT Incident Response:

• Develop and maintain an effective IT incident response plan, coordinating efforts to detect, respond, and recover from IT security incidents.
• Conduct post-incident reviews to continuously improve response procedures.

Security Infrastructure:

• Oversee the design and implementation of robust security infrastructure, including firewalls, intrusion detection/prevention systems, and endpoint security with the IT department.
• Assess and ensure that IT Security is implemented across IT Assets and projects.

Security Operations Center (SOC):

• Liaise with the Head Office SOC team, ensuring 24/7 monitoring and rapid response to security incidents.
• Oversight and refine if necessary SOC processes, including threat hunting and intelligence sharing.

Cybersecurity:

• Drive operational initiatives to enhance the bank’s cybersecurity posture through proactive threat detection and prevention measures.
• Collaborate with 2nd Line of Defense (TRM / CISO, Compliance, Risk teams, etc.) and 1st Line of Defense (IT, Control Tower, Business Continuity, Purchasing, etc.) at the CIB Americas platform as well as Head Office to implement a robust Cybersecurity program.
• Liaise with internal and external experts to stay ahead of emerging cyber threats.

Access Management and Controls:

• Develop and enforce access management in line with the company policies to ensure the right individuals have appropriate access to systems and data.
• Recertify users accesses as well as applications.
• Implement and manage robust IT Security and Access Management controls to safeguard against CyberSecurity threats and unauthorized access.

IT Security Awareness and Training:

• Foster a culture of IT security within the IT department as well as across the organization through training programs, communication initiatives and controls, conjointly with CIB Americas TRM / CISO.
• Raise awareness to Head Office on Americas IT Security requirements to ensure alignment, strong collaboration, and robust IT Security solutions.
• Collaborate with HR and other CIB Americas department that employees are well-versed in IT security best pra