Information Security Officer

About CTBC Bank

Established in 1966, CTBC Bank has been building customers’ wealth and Taiwan’s economy for over half a century now. In that time, it has grown into an international force offering a comprehensive suite of financial services. As of the end of 2022, the Bank’s consolidated assets totaled NT$5.54 trillion, the most among all privately owned banks in Taiwan. It is also the best-performing bank in other indicators, such as profits, tier 1 capital, and client base. In addition to its 152 branches nationwide, CTBC Bank has the most extensive international presence of any Taiwanese bank, with 219 overseas outlets across 14 countries and regions. With a subsidiary, The Tokyo Star Bank, purchased in Japan and CTBC Bank subsidiaries established in the U.S., Canada, the Philippines, and Indonesia, the Bank has laid a strong foundation for regional business, providing international enterprises with comprehensive transnational financial services. Visit our website at https://www.ctbcbank.com/twrbo/en_tw/index_en.html

JOB OPPORTUNITY:

INDUSTRY: Commercial Banking

POSITION: Information Security Officer

LOCATION: Manhattan, NY.

RESPONSIBILITIES:

Cybersecurity Regulation Compliance (mainly Part 500)

• Serve point of contact for information security incident response and identify, report and control any related incidents.
• Develop and deliver Information Security training to the Branch’s employees.
• Submit written statement to Superintendent of NYSDFS for certification.
• Approve application security procedures, guidelines and standards which comprise the cybersecurity program and whenever they are updated.
• Conduct periodic cyber security and risk assessment of Information Systems to ensure compliance with applicable laws, rules, regulations and industry standards.

Local Information Security and Physical Security Support

• Conduct research on existing and emerging cyber threat issues that may impact the Branch and the clients.
• Review system security log reports, including but not limited to Security Violation, User Maintenance, Role Maintenance, User Activity, etc.
• Review and modify cybersecurity policy and user control procedure of the Branch.
• Approve and monitor the authorization of user changes in the Branch’s user access system.
• Provide technical and physical support for Branch office alarm system, security equipment, and security systems.
• Other duties as assigned by Branch General Manager.

Head Office Report

• Submit and report Information Security Program incorporating results from Risk Assessments to Head Office.
• Prepare and submit to Chief Information Security Officer (CISO) at Head Office status report which identifies any approval actions relating to Part 500 performed by ISO.
• Additional duties to be assigned by Head Office.

REQUIREMENT:

• 10+ years of experience in risk, compliance and information security policy development including 5+ years of Information Security Officer experience in finance industry.
• Knowledge and working experience of finance industry information security, governance, risk and compliance practices, including the compliance requirement of NY DFS Part 500 (Cybersecurity Regulation).
• Experience working with external regulators, including NY DFS.
• Experience with delivering educational programs in the area of security awareness.
• Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and parties.
• CISSP, CISA or CISM designations preferred.

*The position will serve as an individual contributor while working closely with local IT department.