Hiring: Chief Information Security Office-Security Services & Cyber Defense Associate Company: Bank of China USA Location: New York, NY Job Posted Time: 2026-09-16 12:41:17 Target Skills & Keywords : Penetration Testing, Risk Management, SIEM, Windows Server About the job Experience: •1 year of work experience in Information security, cybersecurity, vulnerability management, security architecture, network, security tools and computer systems administration, risk management. •Minimum 1 year of work experience in Information security, cybersecurity, vulnerability management, security architecture, network, security tools and computer systems administration, risk management. Required Skills: •Security Architecture, Security Engineering & Security Operations (45%) •Provide Security Standards and requirements for all in-house and Third-Party applications being built or procured by the Bank •Provide support and expertise to IT to find security solutions that meet requirement •Manage assigned security monitoring tools for daily security monitoring which includes but not limited to network devices, platforms, databases, applications •Design, configure and enhance assigned security tools for effective security event monitoring and escalate accordingly •Conduct assigned security tools rule and configuration validation and monitored devices recertification - Identify and escalate security issues and assist in cybersecurity incident investigations •Perform regular maintenance of assigned security tools including software upgrades, license updates and fine tuning of rules and configuration •Threat Management, Vulnerability Management & Penetration Testing (45%) Qualifications: •Bachelor’s degree in business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required. •Good understanding of regulatory requirements including FFIEC, GLBA, NIST. •Knowledge of Information security and cyber security best practices. •Knowledge of systems administration such as Windows Server, Active Directory management, Firewall, UNIX system, network architectures, etc. •Knowledge of security tools such as SIEM, DLP, XDR, EDR, Web Filter etc. •Good understanding of protocol behaviors, validity of identified vulnerabilities. •CISSP/CRISC/ or IT related certifications preferred. Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!