Cyber Defense Analyst VP is a senior-level cybersecurity role within the Business, Functions and Technology organization, focused on maintaining a secure technology ecosystem across the Services business. The successful candidate will manage vulnerability management programs, perform root cause analysis on security incidents, and conduct compliance reviews to ensure adherence to enterprise standards. Day-to-day responsibilities include translating complex threat intelligence into actionable risk mitigation strategies, improving SIRT workflows, and developing cyber response plans for crisis management. This role requires deep expertise in threat intelligence, forensics, security architecture, and application security. The candidate must be proficient in advanced analytical techniques to communicate with technical and non-technical stakeholders while navigating a compliance-driven financial services environment. Additionally, the position involves assessing risks associated with digital assets, including blockchain-based solutions, tokenization, and cryptocurrency services.
Manage vulnerability risk treatment by escalating high-risk issues to CISO leadership and business stakeholders.
Enhance the Vulnerability Threat Management operating model to align with corporate risk governance standards.
Execute root cause analysis on assessment issues to identify and mitigate recurring high-risk vulnerabilities.
Conduct security compliance reviews to ensure adherence to bank requirements and regulatory standards.
Analyze Security Incident Response Team trends to reduce repeat incident volumes through process improvements.
Develop and maintain cyber response plans, escalation procedures, and crisis management training materials.
Assess security risks associated with digital assets, including blockchain, tokenization, and cryptocurrency services.
What we're looking for
Must have 5+ years of relevant experience in cybersecurity across multiple security domains.
Must possess deep technical expertise in threat intelligence, forensics, vulnerability management, security architecture, and application security.
Must have proven experience operating within a vulnerability management program including VTM frameworks and risk appetite governance.
Must have experience conducting security assessments and compliance reviews against enterprise standards and regulatory requirements.
Must demonstrate the ability to manage and improve security incident response workflows, including root cause analysis and trend reporting.
Must be proficient in advanced analytical techniques to translate complex data into actionable insights for various stakeholders.
Must have experience documenting escalation procedures, incident response plans, and crisis management guidelines in a large enterprise or financial institution.
Must possess strong cross-functional collaboration skills with CISO leadership, ISO contacts, and technology teams.