Chief Information Security Office - Security Operation Center Associate

Bank of China Limited, New York Branch • New York, NY

163d • $42,000 - $90,000

About The Position

This incumbent will provide Security Operation Center services as required to fulfill the Bank's information security program requirements. This incumbent will provide real-time response and analysis to security threats across enterprise systems. In addition, this incumbent will provide support to Security Services & Cyber Defense, Governance, Compliance and Risk Management functions. This position’s schedule will rotate on a planned 8-hour shifts basis, covering 24 hours/day, 7 days/week, including overnight, weekend, and holiday.

Requirements

• Bachelor’s degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required.
• Minimum 1 year of work experience in Information security, cybersecurity, vulnerability management, security architecture, network, security tools and computer systems administration.
• Minimum 1 year of experience in risk management.
• Good understanding of regulatory requirements including FFIEC, GLBA, NIST.
• Knowledge of Information security and cyber security best practices.
• Knowledge of systems administration such as Windows Server, Active Directory management, Firewall, UNIX system, network architectures, etc.
• Knowledge of security tools such as SIEM, DLP, XDR, EDR, Web Filter etc.
• Good understanding of protocol behaviors, validity of identified vulnerabilities.

Nice To Haves

• CISSP/CRISC/ or IT related certifications preferred.

Responsibilities

• Execute incident response protocols for responding to and escalating incidents timely.
• Conduct initial incident response including containment, documentation, and communication.
• Assist with post-incident reporting and analysis.
• Maintain detailed and accurate records of security events and actions taken.
• Execute Security Policies and Standards.
• Manage assigned security monitoring tools.
• Analyze security alerts and assess potential threats.
• Conduct vulnerability scans, patch management, Identity & Access Management, Penetration Testing, Data Privacy, Phishing and Training, Audit affairs and Risk Assessment as needed.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Bachelor's degree