Cyber Threat Intel Manager

Regions Bank•Hoover, AL

1d•Onsite

About The Position

At Regions, the Cyber Security Manager is responsible for leading a diverse team of engineers and analysts charged with the daily operations of enforcing, monitoring, and managing cyber security controls to protect the assets of the bank, customers, and associates. This role monitors the domains of security controls including, but not limited to, malware defense, network security, Internet security, security analytics, threat intelligence and defense, cybercrime, data protection, vulnerability management, and customer authentication. This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay. This position is incentive eligible. This position is intended to be onsite, now or in the near future. Associates will have regular work hours, including full days in the office three or more days a week. The manager will set the work schedule for this position, including in-office expectations. Regions will not provide relocation assistance for this position, and relocation would be at your expense. The locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN, or Charlotte, NC. Regions will not sponsor applicants for work visas for this position at this time. Applicants for this position must currently be authorized to work in the United States on a full-time basis.

Requirements

Bachelor's degree in a related field and eight (8) years of related experience Or High School Diploma or GED and twelve (12) years of related experience
Four (4) years of lead or supervisory/managerial experience
Ability to prioritize assignments while working on multiple projects
Advanced technical aptitude skills
Demonstrated ability to effectively engage project teams and leadership within a corporate setting
Excellent writing and oral communication skills
Strong ability to predict and plan for unknown threats
Strong ability to work well with others and place a premium on the group’s success
Understanding of and ability to interpret applicable rules, regulations, and industry guidance
Experience with indicator of compromise (IOC) collection and correlation efforts to produce actionable tactical intelligence.
Familiarity with the cybercrime ecosystem, including but not limited to, customer account takeovers, dark web research, money mules, and phish kit analysis.

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other industry certification
Good understanding of current internal and external cyber threats to the financial services sector
Experience managing Information Technology and/or Information Security projects
Experience with security operations and incident response/handling
Keep up with and write assessments on the latest developments in the cyber threat landscape, including in the frontier AI space.

Responsibilities

Develops cyber security architecture/designs, controls, processes, standards, and strategies to ensure alignment with Information Security standards, emerging threats, and overall Information Security strategy
Develops and implements incident response protocols for ongoing threats and attacks
Communicates status of current threat environment, incidents, and projected threats to senior management and executives
Manages the evaluation and testing of hardware, firmware, and software for possible impact on systems security
Coordinates with other managers to integrate Information Security project components with other projects including application development, network, server, and mainframe
Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services
Lead enterprise Cyber Threat Intelligence and Threat Hunting programs to proactively identify emerging threats, adversary activity, and security gaps, while enabling intelligence-driven defense strategies.
Produce actionable cyber threat intelligence in support of Cyber, Third-Party Risk Management, Technology, Enterprise Fraud Management, and additional key stakeholders.
Keep up with and write assessments on the latest developments in the cyber threat landscape, including in the frontier AI space.
Interface with peer financial institutions via several key industry groups to share and learn best practices.
Mature Digital Brand Protection Capability to mitigate threats across numerous mediums, including spoofed voice calls, text messages, domains, email, search engine ads, and social networks.
Escalate critical externally reported vulnerabilities to key internal stakeholders.
Build on existing cyber, fraud, and insider threat hunt capabilities that effectively action the latest cyber threat intelligence.
Build, mentor, and lead a high-performing security team while managing budgets, vendor relationships, and security technology investments.