IT Risk Manager

The Village Bank•Newton, MA

About The Position

The Information Technology Risk Manager is responsible for the oversight and execution of IT security related technologies. This individual will assist the Senior Vice President of Information Technology in developing and implementing the Bank’s IT security/cybersecurity strategy. A key function of this role is to serve as the project manager for new technology initiatives, ensuring deployments are properly planned, coordinated, and documented, and that appropriate safeguards are administered.

Requirements

Bachelor's degree (B. A.) from four-year college or university and 5 years plus related experience and/or training; or equivalent combination of education and experience in an IT or banking related position.
Specialized skills in the theory and logic of technology; operating systems, network systems, banking systems and the full spectrum of applications used by bank staff.
An awareness of the Bank’s network structure, including a basic understanding of the LAN and Wan topologies, servers, firewall and router placements and operating systems.
A strong understanding of VDI environments.

Nice To Haves

Consider obtaining IT security certifications such as CISM (Certified Information Security Manger), CISSP (Certified Information System Security Professional) or CISA (Certified Information Systems Auditor).

Responsibilities

Management of the Bank’s firewall program.
Oversight of the Bank’s desktop patch management program.
Administration of the Bank’s anti-malware systems, (in collaboration with the Information Security Department).
Administration of the Bank’s password management program.
Development of IT departmental security policies and procedures.
Serve as liaison with technology consultants, vendors, and auditors.
Participates in audits, and assessments involving IT security and provide support, as appropriate.
Help facilitate preparations for regulatory examinations.
Oversight of the IT security alert monitoring program.
Conduct incident response investigations and document accordingly, (in collaboration with the Information Security Department).
Participate in incident response and business continuity tabletop activities.
Monitor advisories for industry technology concerns.
Evaluate potential scenarios and actual incidents to incorporate sound reaction plans, comprehensive documentation, and upgrading of policies and procedures accordingly.
Review and coordinate IT policies to ensure regulatory compliance and effective change management measures are in place.
Direct and coordinate information technology projects to ensure adherence to bank policies and associated risk assessments take place.
Maintain and review appropriate IT project planning documentation.
Ensure all project stakeholders feel well communicated with and that training is considered as part of all initiatives.
Assist SVP/ IT Manager with the maintenance of Bank’s BCP program, including scheduling and conducting disaster recovery tests.
Serve as member of the Information Technology Steering Committee.
Be familiar with all FFIEC and FDIC-FIL recommendations.
Possess a strong understanding of AI, and the capability to leverage AI to facilitate responsibilities.
Work with the Information Security Officer to help support the Bank’s Information Security Program, as applicable.
Provide support for Help Desk as needed or directed.
Assume responsibility for other functions within the department as needed or directed.