Corporate It Security Manager

CORPORATE IT SECURITY MANAGER

Our Company

At FirstBank PR, we strive to be trusted advisors to our clients, and our employees are the ones that ensure we deliver on our promise of excellence in personalized customer service. Our more than 3,100 employees in Puerto Rico, the Virgin Islands and Florida share a passion for excellent customer service. We are proud of our team because they are continuously surpassing our client's expectations.

Do you have a passion for helping customers, building relationships, and delivering extraordinary, personalized customer service? If your answer is yes, FirstBank is the number one place for you.

A Brief Overview

The IT Security Manager leads the Corporation's cyber-defense program and is accountable for security monitoring, detection and response, incident management, vulnerability and exposure management, endpoint, email, network, application, data-loss prevention, and managed security service oversight. The role translates cyber risk into prioritized operational action and provides timely reporting and recommendations to the CSO Management and governance committees.

What you'll do

Cyber Security Operations

· Lead Cyber Defense strategy, operating procedures, staffing, service delivery, technology administration, and continuous improvement.

· Oversee SOC/MDR performance, security monitoring, alert triage, investigation quality, escalation, threat hunting, and incident closure.

· Own the Information Security Incident Response Plan and coordinate preparation, response, containment, recovery, communications, evidence preservation, and lessons learned.

· Oversee vulnerability, configuration-hardening, penetration-testing, patch, and exposure-management activities using risk-based prioritization.

· Chair or support the Patch Management Board and related governance, ensuring material vulnerabilities, exceptions, mitigating controls, and overdue remediation are escalated.

· Oversee endpoint, email, network, WAF, DLP, vulnerability-scanning, and other cyber-defense capabilities and ensure they operate as intended.

· Establish AI security operations to monitor AI-enabled threats, misuse, data exposure, agent activity, and emerging attack techniques.

· Expand DLP governance and operations, including monitoring, tuning, investigation, exception management, and reporting.

· Manage critical security service providers, contract and control performance, service-level compliance, remediation, and escalation.

· Develop cyber-risk metrics, dashboards, threat briefings, and executive reports for the CSO Management, management committees, auditors, regulators, and the Board, as required.

· Coordinate with Security Architecture, IAM Governance, Access Management Operations, GRC, Technology, Legal, Privacy, ERM, and business leaders.

· Lead and develop Cyber Defense personnel, define accountabilities, establish coverage and on-call expectations, and maintain succession plans.

· Support new initiatives and technology implementations by identifying operational security requirements and validating readiness.

Security Incident Management

· Responsible for the Information Security Incident Response Plan.

· Serve as a subject matter expert for Incident handling and response.

· Establishes and administers a process for investigating and acting on security incidents which may result in a informaiton breaches.

· Conduct Incident Management preparedness.

· Assist in forensic investigations regarding Information Security incident or events

Information Security Project Management

· Assist the Project Management Office with the Project Delivery Lifecycle to ensure Information Security practices are maintained in each step: Requirement, Design, Testing, Implementation, etc.

· Ensure key security milestones are completed for each project (where applicable): Vulnerability scans, Code Review, Penetration Tests, Logging capabilities, Role-based Access, etc.

· Server as a Subject Matter Expert and provide recommendations for remediating vulnerabilities identified through Penetration tests and Vulnerability Scans.

· Ascertain hardening standards are contemplated as part of each project implementation. Management of Compliance scan to ensure new applications comply with Corporate Standards.

· Active participant of the Infrastructure Steering Committee.

Threat Intelligence

· Ensure the Corporation receives adequate Threat Intel through different forums, such as working knowledge of FS-ISAC and similar open/commercial threat intelligence feeds.

· Process both internal and external Cyber Threat Intel for determination of potential threat and impact, and implementation of mitigating actions.

· Escalate with vendors any outstanding event that may hamper or negatively affect the Corporations IT Assets.<