Information Security Specialist (US) - Vulnerability Disclosure Programs

Information Security Specialist

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives
• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors
• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 7+ years of relevant experience
• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications:

• Advanced penetration testing experience
• Experience working in security disclosure program communities
• Experience with Threat Modelling applications
• Certifications in the domain of penetration testing or application security (e.g., OSCP, OSWE, GWAPT, etc.)
• Participation in Bug Bounties, CTFs, or similar activities
• Program Management experience

Physical Requirements:

• Domestic Travel Occasional
• International Travel Never
• Performing sedentary work Continuous
• Performing multiple tasks Continuous
• Operating standard office equipment - Continuous
• Responding quickly to sounds Occasional
• Sitting Continuous
• Standing Occasional
• Walking Occasional
• Moving safely in confined spaces Occasional
• Lifting/Carrying (under 25 lbs.) Occasional
• Lifting/Carrying (over 25 lbs.) Never
• Squatting Occasional
• Bending Occasional
• Kneeling Never
• Crawling Never
• Climbing Never
• Reaching overhead Never
• Reaching forward Occasional
• Pushing Never
• Pulling Never
• Twisting Never
• Concentrating for long periods of time Continuous
• Applying common sense to deal with problems involving standardized situations Continuous
• Reading, writing and comprehending instructions Continuous
• Adding, subtracting, multiplying and dividing Continuous

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required. The listed or specified responsibilities & duties are considered essential functions for ADA purposes.