Corporate IT Security Manager

About the role

FirstBank PR is seeking a senior leader to head its corporate cyber‑defense program. The IT Security Manager will be accountable for security monitoring, incident response, vulnerability management and the oversight of critical security service providers.

Key responsibilities

• Lead the SOC/MDR operations, including alert triage, threat hunting, investigation quality and incident closure.
• Own the Information Security Incident Response Plan, coordinating preparation, containment, recovery and post‑incident lessons.
• Oversee vulnerability, patch and exposure management, chairing the Patch Management Board and ensuring risk‑based prioritisation.
• Manage endpoint, email, network, WAF, DLP and AI‑security operations to ensure they function as intended.
• Develop cyber‑risk metrics, dashboards and executive briefings for senior management and the board.
• Lead and develop the Cyber Defense team, defining coverage, on‑call expectations and succession plans.

Required profile

• Bachelor’s degree in IT, Computer Science, Engineering or Business; Master’s preferred.
• At least 6 years of information security experience, preferably in banking, with 3 years in a financial‑services environment.
• Strong knowledge of security frameworks (COBIT 5, ISO 27000, NIST) and regulatory requirements (FDIC, FFIEC, SOX).
• Relevant certifications such as CISSP or CISM are highly desired.

Required skills

• SOC/MDR operations, incident response and threat hunting.
• Vulnerability scanning, penetration testing, patch and configuration management.
• Endpoint protection, email security, network security, Web Application Firewall (WAF) and Data Loss Prevention (DLP).
• AI‑enabled security monitoring and threat intelligence handling.
• Proficiency with Microsoft Office suite (Excel, Word, Outlook, Access, PowerPoint).