Cyber Threat Intel Manager

Regions•Nashville, TN

2d•$168,094 - $234,020•Onsite

About The Position

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice. At Regions, the Cyber Security Manager is responsible for leading a diverse team of engineers and analysts charged with the daily operations of enforcing, monitoring, and managing cyber security controls to protect the assets of the bank, customers, and associates. This role monitors the domains of security controls including, but not limited to, malware defense, network security, Internet security, security analytics, threat intelligence and defense, cybercrime, data protection, vulnerability management, and customer authentication.

Requirements

Bachelor's degree in a related field and eight (8) years of related experience
Or High School Diploma or GED and twelve (12) years of related experience
Four (4) years of lead or supervisory/managerial experience
Experience with indicator of compromise (IOC) collection and correlation efforts to produce actionable tactical intelligence.
Familiarity with the cybercrime ecosystem, including but not limited to, customer account takeovers, dark web research, money mules, and phish kit analysis.

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other industry certification
Good understanding of current internal and external cyber threats to the financial services sector
Experience managing Information Technology and/or Information Security projects
Experience with security operations and incident response/handling
Ability to prioritize assignments while working on multiple projects
Advanced technical aptitude skills
Demonstrated ability to effectively engage project teams and leadership within a corporate setting
Excellent writing and oral communication skills
Strong ability to predict and plan for unknown threats
Strong ability to work well with others and place a premium on the group’s success
Understanding of and ability to interpret applicable rules, regulations, and industry guidance

Responsibilities

Develops cyber security architecture/designs, controls, processes, standards, and strategies to ensure alignment with Information Security standards, emerging threats, and overall Information Security strategy
Develops and implements incident response protocols for ongoing threats and attacks
Communicates status of current threat environment, incidents, and projected threats to senior management and executives
Manages the evaluation and testing of hardware, firmware, and software for possible impact on systems security
Coordinates with other managers to integrate Information Security project components with other projects including application development, network, server, and mainframe
Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services
Lead enterprise Cyber Threat Intelligence and Threat Hunting programs to proactively identify emerging threats, adversary activity, and security gaps, while enabling intelligence-driven defense strategies.
Produce actionable cyber threat intelligence in support of Cyber, Third-Party Risk Management, Technology, Enterprise Fraud Management, and additional key stakeholders.
Keep up with and write assessments on the latest developments in the cyber threat landscape, including in the frontier AI space.
Interface with peer financial institutions via several key industry groups to share and learn best practices.
Mature Digital Brand Protection Capability to mitigate threats across numerous mediums, including spoofed voice calls, text messages, domains, email, search engine ads, and social networks.
Escalate critical externally reported vulnerabilities to key internal stakeholders.
Build on existing cyber, fraud, and insider threat hunt capabilities that effectively action the latest cyber threat intelligence.
Build, mentor, and lead a high-performing security team while managing budgets, vendor relationships, and security technology investments.