Cybersecurity Compliance Specialist

2 weeks ago


Baltimore, Maryland, United States CFG BANK Full time

TITLE Cybersecurity Compliance Specialist

EOE STATEMENT

CFG is an Equal Opportunity Employer. We provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other legally protected characteristic. We are committed to ensuring a diverse and inclusive workplace, and all employment decisions are based on merit, qualifications, and business needs. If you require accommodations during the application process, please contact Human Resources.

LOCATION CFG Corporate Office

DESCRIPTION

COMPANY SUMMARY:

We offer a wide range of banking solutions, including commercial, personal, and digital services tailored for businesses in the Mid-Atlantic region and the national healthcare sector. Our organizational culture is defined by authenticity, innovation, and empathy. We challenge traditional banking practices with a daring and creative approach, exploring new avenues and executing pioneering agreements. Recognized as a top workplace by the Baltimore Business Journal, our mission is to ensure that employees feel their decision to join us was the best they could make. At CFG, your entrepreneurial spirit will flourish, and together we will drive success and create a meaningful impact.

POSITION SUMMARY:

The Cybersecurity Compliance Specialist plays a vital role in overseeing CFG's information security landscape. This position is responsible for the effective execution and upkeep of the information security framework and actively participates in ongoing vendor risk management initiatives. The Specialist will ensure adherence to information security and vendor risk-related laws, regulations, and industry standards. A successful candidate will possess strong communication skills, able to convey complex subjects in a clear and concise manner.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Information Security Program (ISP):

  • Advocating for information security awareness across various departments.
  • Developing and maintaining information security policies and procedures.
  • Analyzing audit logs, events, reports, and alerts, providing well-reasoned responses and resolutions.
  • Monitoring and reporting on patch management and vulnerability strategies.
  • Identifying non-compliance or risk areas and recommending remediation actions.
  • Engaging in systems and controls risk assessments.
  • Overseeing the social engineering awareness initiative, including suspicious message reviews, training sessions, and reporting.

Vendor Risk Management (VRM) Program:

  • Participating in the active management and oversight of the VRM lifecycle.
  • Conducting VRM risk assessments, proactively identifying and addressing potential risks from third and fourth parties.
  • Gathering and reviewing documentation related to vendor relationships.
  • Completing thorough evaluations of vendor-provided documentation.
  • Ensuring timely completion of oversight tasks in accordance with established guidelines.
  • Contributing to the development of VRM policies and procedures, ensuring compliance with applicable laws, regulations, and industry best practices.
  • Providing regular updates on progress.

QUALIFICATIONS AND REQUIREMENTS:

  • Bachelor's degree in information technology or a related field, or equivalent relevant experience. Relevant professional certifications will also be considered.
  • 3-5 years of experience in information security, preferably within a financial institution.
  • Exceptional written and verbal communication skills, including the ability to conduct thorough research and present findings clearly.
  • Strong analytical and critical thinking skills.
  • Robust work ethic and the ability to achieve individual results within a collaborative environment.
  • Capability to work independently and manage multiple tasks while meeting deadlines.

WORK ENVIRONMENT: We offer a hybrid work model, with a combination of in-office and remote work following an initial onboarding period.

CFG Bank is an Equal Opportunity Employer. We provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other legally protected characteristic. We are committed to ensuring a diverse and inclusive workplace, and all employment decisions are based on merit, qualifications, and business needs. If you require accommodations during the application process, please contact Human Resources.

ABOUT THE ORGANIZATION

CFG BANK HAS ESTABLISHED POLICIES AND PROCEDURES TO FULFILL THE REQUIREMENTS OF THE BANK SECRECY ACT (BSA), USA PATRIOT ACT (CUSTOMER IDENTIFICATION PROGRAM) AND ECONOMIC SANCTIONS PROGRAM (OFAC). IN ORDER TO ENABLE ITS EMPLOYEES TO ACHIEVE THE OBJECTIVES AND RESPONSIBILITIES OUTLINED IN THESE POLICIES AND PROCEDURES AND TO COMPLY WITH THE REQUIREMENTS OF THESE ACTS AND LAWS, THE BANK HAS SET FORTH UP-TO-DATE CURRENCY TRANSACTION REPORTING AND SUSPICIOUS TRANSACTION REPORTING PROCEDURES INTENDED TO ASSURE THE PREPARATION AND FILING OF COMPLETE AND ACCURATE CURRENCY TRANSACTION REPORTS (CTR) AND SUSPICIOUS ACTIVITY REPORTS (SAR) FOR EACH AND EVERY REPORTABLE TRANSACTION AND HAS PROVIDED CURRENT OFAC LISTS FOR NEW CUSTOMERS AND LOAN APPLICANT COMPARISONS.

AS AN EMPLOYEE OF CFG BANK YOU ARE REQUIRED TO BE:

• DEDICATED TO ACHIEVING THE OBJECTIVE OF ASSISTING BANK MANAGEMENT IN THEIR EFFORTS TO IDENTIFY REPORTABLE TRANSACTIONS; AND

• DEDICATED TO ACHIEVING THE OBJECTIVES AND REPORTING REQUIREMENTS OUTLINED IN THE BANK'S BSA, CUSTOMER IDENTIFICATION PROGRAM AND ECONOMIC SANCTION PROGRAM POLICES.

THE MANDATORY TRAINING TO COMPLY WITH THE REQUIREMENTS OF THE BANK'S BSA, USA PATRIOT ACT AND ECONOMIC SANCTIONS PROGRAM WILL BE PROVIDED WITHIN 90 DAYS OF ACCEPTING THIS POSITION.

PIb1c423f5-



  • Baltimore, Maryland, United States BDO Full time

    Job Summary:The Senior Cybersecurity and Compliance Expert at BDO supports and advises clients to satisfy their compliance, cybersecurity, IT controls, and governance frameworks applicable to their organization. This role evaluates and assesses business and technology operations to help companies with compliance and security to applicable frameworks, along...


  • Baltimore, Maryland, United States cFocus Software Incorporated Full time

    cFocus Software Incorporated is seeking a Cybersecurity Compliance Team Leader to enhance our efforts in supporting the Department of Homeland Security. This role offers the flexibility of remote work arrangements.Key Responsibilities:Ensure and uphold the security compliance of information systems in accordance with NIST standards, federal security...


  • Baltimore, Maryland, United States BDO Full time

    Job Summary:The Senior Cybersecurity and Compliance Consultant at BDO supports and advises clients to satisfy their compliance, cybersecurity, IT controls, and governance frameworks applicable to their organization. This role evaluates and assesses business and technology operations to help companies with compliance and security to applicable frameworks,...


  • Baltimore, Maryland, United States Parsons Company Full time

    In a landscape filled with potential, embark on a journey with boundless prospects. At Parsons, we believe that if you can envision it, you can achieve it. Envision a career alongside intelligent, diverse individuals united by a common mission. Picture a workplace where authenticity is celebrated, where you can flourish, and where your next opportunity...


  • Baltimore, Maryland, United States Rollout Systems Full time

    Cybersecurity Assurance Specialist - Immediate Opportunity - Signing Bonus AvailableAre you a holder of an active US government TOP SECRET level security clearance along with a Security+ certification? Do you seek a role that allows you to leverage your expertise to tackle intricate challenges? If you resonate with our philosophy of "Excellence, Respect, and...


  • Baltimore, Maryland, United States OPS Consulting, LLC Full time

    Company Overview:OPS Consulting, LLC is committed to delivering top-notch cybersecurity solutions and services.Position Summary:We are in search of a skilled Cybersecurity Systems Assurance Specialist to enhance our team. This role involves a comprehensive approach to safeguarding information systems and ensuring compliance with security protocols.Key...


  • Baltimore, Maryland, United States ARSIEM Corporation Full time

    About ARSIEM CorporationAt ARSIEM Corporation, we are dedicated to building a reliable and trusted partnership with our government clients. Our support extends to various agencies throughout the United States Government. With a skilled workforce of qualified professionals, ARSIEM is committed to delivering the highest quality of service.As the demand for our...


  • Baltimore, Maryland, United States Intellect Solutions Full time

    Position OverviewWe are seeking a dedicated Cybersecurity Systems Protection Specialist to join our team. This role is crucial in safeguarding our information systems and ensuring compliance with established security protocols.Key ResponsibilitiesMaintain daily security operations for designated information systems.Ensure all Information Systems (IS) are...


  • Baltimore, Maryland, United States belaytech Full time

    About Belay Technologies:Belay Technologies has been recognized as one of the Best Places to Work by the Baltimore Business Journal.Position Overview:Belay Technologies is in search of a Cybersecurity Systems Assurance Specialist to enhance our intelligence team. The selected candidate will play a crucial role in supporting the information assurance...


  • Baltimore, Maryland, United States RPMGlobal Full time

    Cybersecurity Systems OfficerThe Cybersecurity Systems Officer will deliver Security Education, Training, and Awareness (SETA) support to Tactical Networks. This role will operate in a hybrid model, requiring three days on-site and two days of remote work each week.KEY RESPONSIBILITIES- Formulate or adjust security program plans and requirements for computer...


  • Baltimore, Maryland, United States Palo Alto Networks Full time

    About the RoleWe are seeking a highly skilled and experienced Cybersecurity Solutions Consultant to join our team at Palo Alto Networks. As a key member of our sales team, you will be responsible for providing technical leadership and expertise to our customers in their security transformation journey.Key ResponsibilitiesMeet and exceed sales quotas by...


  • Baltimore, Maryland, United States TEKsystems Full time

    Job OverviewClearance Requirement: Must possess a current Top Secret/SCI Clearance and hold a CompTIA Security+ CE Certification.Key Skills Required:1) Proficiency with SIEM tools (such as ArcSight, Splunk, Wireshark, etc.)2) Experience in conducting Packet Capture (PCAP) analysis3) Understanding of the STIGS process and its framework.Role Summary:The...


  • Baltimore, Maryland, United States Parsons Company Full time

    Join Our Team at ParsonsAt Parsons, we believe in creating a world of possibilities filled with endless opportunities. Imagine a career where you can collaborate with intelligent and diverse individuals, all working towards a common goal. We offer a workplace that encourages you to be yourself, thrive, and find your next career move.About UsParsons stands as...


  • Baltimore, Maryland, United States Palo Alto Networks Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Solutions Consultant to join our team at Palo Alto Networks. As a key member of our Solutions Consulting team, you will play a critical role in defining technical solutions that secure our customers' key business imperatives and ensure value realization of their investment with us.Key...


  • Baltimore, Maryland, United States Livanta Full time

    OverviewLivanta LLC is seeking a skilled Cybersecurity Program Manager to enhance our team.In this role, you will be tasked with establishing and executing security protocols to safeguard our information systems, networks, and digital assets. Your collaboration with the IT department and leadership will be crucial in pinpointing security weaknesses,...


  • Baltimore, Maryland, United States Northrop Grumman Full time

    Requisition ID: R Category: Information TechnologyLocation: Baltimore, Maryland, United States of AmericaClearance Type: SecretTelecommute: No - Teleworking not available for this positionShift: 1st Shift (United States of America)Travel Required: Yes, 10% of the TimeRelocation Assistance: Relocation assistance may be availablePositions Available: 1At...


  • Baltimore, Maryland, United States Northrop Grumman Full time

    Requisition ID: RCategory: Information Technology Location: Baltimore, Maryland, United States of America Clearance Type: Top Secret Telecommute: No - Teleworking not available for this position Shift: 1st Shift (United States of America) Travel Required: Yes, 10% of the Time Relocation Assistance: Relocation assistance may be available Positions Available:...


  • Baltimore, Maryland, United States Russell Tobin Full time

    Job OverviewRussell Tobin is collaborating with a reputable organization in the Financial Sector to find a skilled Regulatory Compliance Specialist.Position: Regulatory Compliance SpecialistLocation: Baltimore, MD. Contract Duration: 12 months+ Compensation: $25-$35/hourA Regulatory Compliance Specialist in the financial sector is responsible for ensuring...


  • Baltimore, Maryland, United States The Boeing Company Full time

    Job OverviewAt Boeing, we are dedicated to innovation and teamwork to enhance global safety and security. Our commitment to diversity, equity, and inclusion shapes our workplace culture, ensuring a welcoming and respectful environment that promotes professional development. Join us in shaping the future.The Boeing Company is seeking a Cybersecurity –...


  • Baltimore, Maryland, United States ALTA IT Services, LLC Full time

    Position Title: Digital Forensics SOC Analyst IIILocation: South Baltimore area – HYBRID ONSITE - 2 days/week in officeContract Duration: 1+ year contract with potential for multi-year extension or permanent transitionCitizenship Requirement: Must possess U.S. CitizenshipEmployment Type: W2 required; no C2C arrangementsKey Responsibilities:ALTA IT...