Sr. Infrastructure Security Manager

Job Title:

Sr. Infrastructure Security Manager

Location:

Block 23

What you'll do:

The Sr. Infrastructure Security Manager plays a pivotal role in contributing to IT leadership, shaping the strategic direction of security infrastructure and services. This senior management position involves defining and delivering the security engineering roadmap, ensuring continuous improvement, and bridging the gap between control objectives and evidence. With deep expertise in cybersecurity and risk management frameworks, the manager is responsible for creating and maintaining critical documentation, including architecture diagrams and standard operating procedures.
In this role, the Sr. Infrastructure Security Manager collaborates closely with Enterprise Architecture, presenting regularly to review boards to ensure alignment and strategic oversight. Additionally, the manager participates in an on-call rotation, managing service-impacting activities outside of normal business hours, and may require some travel. This leadership position demands both technical acumen and the ability to drive strategic decisions, ensuring the organization's security posture is robust and forward-thinking.

• Champion the creation and maintenance of security processes, procedures, standards, and patterns: Establish a robust security framework that protects the organization’s assets and supports its mission.
• Lead a team of high-performing engineers: Inspire and guide a team of skilled engineers to define and deliver the enterprise security roadmap, ensuring it aligns with organizational goals and drives strategic success.
• Mentor and develop team members: Foster a culture of continuous improvement and professional growth, supporting the development of future leaders within the organization.
• Work with Cyber Leadership in the preparation and managing an annual budget, business cases, execution plans, and operating plans for the team and resources required to achieve established program priorities.
• Ensure adequate risk management and security processes/controls are established and maintained in alignment with the risk appetite for the Bank, as well as applicable regulatory and enterprise risk management expectations.
• Strategically plan and mature security infrastructure, services, and processes: Ensure they evolve to meet the dynamic needs of the business and enhance overall security posture.
• Set and achieve ambitious annual OKRs & KPIs: Drive continuous improvement and operational excellence in service risk, availability, capacity, and performance management.
• Collaborate with IT Governance, Risk, Compliance, and Audit teams: Foster strong partnerships to ensure alignment on security objectives and regulatory compliance.
• Evaluate and procure leading-edge technology solutions Present well-researched recommendations to senior leadership to advance the organization’s security capabilities.
• Lead and manage complex IT projects: Oversee deployments, migrations, and acquisitions to ensure seamless integration and minimal disruption to operations.

What you'll need:

• Bachelor's degree ​in Computer Science, Information Technology, or a related field: Provides the technical foundation and analytical skills necessary for a successful IT career.
• 7+ years of related experience of IT industry experience: Demonstrates a strong record of professional development and leadership in various roles, showcasing your ability to handle complex IT challenges
• Proven leadership, organizational, and mentorship skills: Highlighting your ability to lead teams effectively, organize tasks efficiently, and mentor junior engineers. Professional certifications in cybersecurity or risk management are a plus
• Experience in mission-critical, regulated environments: Such as finance, healthcare, or government, ensuring you can navigate and manage complex regulatory requirements and high-stakes situations.
• Intermediate knowledge of general Financial Services or Banking is preferred.
• Intermediate knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices.
• Intermediate to advanced experience in managing Cyber technology teams within multiple functional areas while ensuring highest quality delivery of complex products or services.
• Intermediate to advanced experience with the execution KPIs and timelines with proven ability to analyze a variety of data and summarize findings in applicable reports or other communication mediums. Utilize data to identify areas of improvement and opportunities for growth by collaborating with business and tech leads.
• Expertise in security frameworks and controls: Including HIPAA, PCI, SOX, CIS, NIST, and ISO, demonstrating your