Assistant Vice President (AVP), Information Security Governance
Core
Manage enterprise security configuration standards, baselines, and exception processes while governing security approvals for SDLC, encryption, and privileged access.
Role type
Senior IC information security governance specialist
Builds
Security configuration baselines, exception records, and approved security controls
Domain
Financial services / Information Security Governance
Required skills
Information security governance, CIS Benchmarks, risk assessment, security configuration management, exception management, SDLC security controls, encryption key management, certificate authority governance, privileged access management, regulatory compliance
Preferred skills
CISSP, CISM, ISO 27001 Lead Implementer/Auditor, CCSP
Technologies
CIS Benchmarks, Security Configuration Scanning Tools, Internal Certificate Authority (CA), SUDO
Responsibilities
Manage and maintain enterprise security configuration standards and baselines; Review and validate security exception requests; Conduct Security Acceptance Checklist (SAC) reviews as part of SDLC; Review and approve encryption key management requests; Review and approve internal CA certificate requests; Review and approve SUDO registration and privileged escalation requests
Seniority
Senior, hands-on IC
