# Chief Information Security Office-Security Services & Cyber Defense Associate

[Bank of China](https://www.jorb.ai/firms/bank-of-china.md) · New York · United States · [Networking & Systems Engineering](https://www.jorb.ai/jobs/networking-systems-engineering.md)

Bank of China is hiring a Chief Information Security Office-Security Services & Cyber Defense Associate in New York. Posted 2026-09-15; applications close 2026-11-14.

**Apply**: https://careers-bocusa.icims.com/jobs/4550/chief-information-security-office-security-services-%26-cyber-defense-associate/job

Posted 4d ago.

## Role details

# Chief Information Security Office – Security Services & Cyber Defense Associate

**Location:** New York, NY

**Job ID:** 2026-4550

**Category:** Risk

**Position Type:** Full-Time

**Posting Date:** September 15, 2026

## About Bank of China

Established in 1912, Bank of China is one of the largest banks in the world, with more than $3 trillion in assets and a footprint spanning over 60 countries and regions. The Bank’s long-term outlook, institutional strength, and global reach provide clients with a stable and reliable financial partner across Corporate and Personal Banking, Trade Services, Commodities, Financial Institutions, and Global Markets.

## Overview

The Security Services & Cyber Defense Associate will support the Bank’s information security program across Security Architecture, Security Engineering, Security Operations, Identity & Access Management, Threat Management, Vulnerability Management, and Penetration Testing.

## Responsibilities

### Security Architecture, Security Engineering & Security Operations (45%)

  
- Provide security standards and requirements for in-house and third-party applications developed or procured by the Bank.
  
- Provide IT with security expertise and support in identifying solutions that meet established requirements.
  
- Manage assigned security monitoring tools for daily monitoring of network devices, platforms, databases, and applications.
  
- Design, configure, and enhance assigned security tools to support effective security event monitoring and escalation.
  
- Conduct security tool rule and configuration validations and recertify monitored devices.
  
- Identify and escalate security issues and assist with cybersecurity incident investigations.
  
- Perform regular maintenance of assigned security tools, including software upgrades, license updates, and fine-tuning of rules and configurations.

### Threat Management, Vulnerability Management & Penetration Testing (45%)

  
- Conduct threat assessments and modeling as required.
  
- Conduct vulnerability scans of internal and external networks.
  
- Present results to IT and collaborate on analysis, criticality levels, and remediation timelines.
  
- Provide oversight of IT remediation efforts and track and report findings to the Information Security Committee.
  
- Coordinate penetration testing exercises in collaboration with IT.

## Qualifications

  
- Bachelor’s degree in business, computer science, management information systems, engineering, mathematics, or a related field is required.
  
- At least one year of experience in information security, cybersecurity, vulnerability management, security architecture, networking, security tools, computer systems administration, or risk management.
  
- Understanding of regulatory requirements, including FFIEC, GLBA, and NIST.
  
- Knowledge of information security and cybersecurity best practices.
  
- Knowledge of systems administration, including Windows Server, Active Directory, firewalls, UNIX systems, and network architectures.
  
- Knowledge of security tools such as SIEM, DLP, XDR, EDR, and web filtering solutions.
  
- Understanding of protocol behavior and the validity of identified vulnerabilities.
  
- CISSP, CRISC, or other IT-related certifications are preferred.

## Pay Range

Actual salary is commensurate with the candidate’s relevant years of experience, skill set, education, and other qualifications.

**Salary Range:** $42,000–$90,000 per year

## Applying to this role

This Chief Information Security Office-Security Services & Cyber Defense Associate role at Bank of China runs through the firm's own careers portal and expects a CV and cover letter written specifically for the posting, not a portable submission carried across firms. Jorb AI's application agent tailors a CV and cover letter from your background to this posting and tracks the role alongside the rest of your applications.

[Tailor this application](https://www.jorb.ai/signup?ref=job-atom&firm=bank-of-china&job=6aa9dc3251c6f45a5df9a418)

## More open roles at Bank of China

- [Queens Branch-Banking Department / Teller Section & Safe Deposit Box Section Associate (Teller)](https://www.jorb.ai/jobs/6aa852c5a26382c285922137.md) – New York, posted 5d ago
- [Legal & Compliance Department - FLU Oversight Intern](https://www.jorb.ai/jobs/6a8cdb42ba78876c0060db90.md) – New York, posted 26d ago
- [Banking Department - Banking Operation Customer Service Associate](https://www.jorb.ai/jobs/6a7a2e64fa8d31672c695d88.md) – New York, posted 1mo ago
- [Legal & Compliance Department - COO Office Intern](https://www.jorb.ai/jobs/6a79f635436379a13c20280b.md) – New York, posted 1mo ago
- [America Data Center | Application Development Department - Application Development Associate](https://www.jorb.ai/jobs/6a74e85c332a29fcd79a8303.md) – New York, posted 1mo ago

## Other open Networking & Systems Engineering roles

- [Systems Administrator (New York)](https://www.jorb.ai/jobs/6a8562eeb2793d0b5999e291.md) at [D. E. Shaw](https://www.jorb.ai/firms/d-e-shaw.md) – New York, posted 1mo ago
- [Systems Engineering Intern (London) - Summer 2027](https://www.jorb.ai/jobs/6a1d8c785934adb8262c10c0.md) at [D. E. Shaw](https://www.jorb.ai/firms/d-e-shaw.md) – London, posted 3mo ago
- [Threat & Exposure Management Analyst](https://www.jorb.ai/jobs/6aadd0d9da92399ef70c8f8d.md) at [ASOS](https://www.jorb.ai/firms/asos.md) – London, posted 12h ago
- [Data Center Network Technician](https://www.jorb.ai/jobs/6aabd70fe5c28c2815cdce0b.md) at [Amazon](https://www.jorb.ai/firms/amazon.md) – London, posted 2d ago
- [Analyst, Cyber Security Engineer, Information Security Services, Group Technology](https://www.jorb.ai/jobs/6aab67529ad24ec008c1a7c9.md) at [DBS](https://www.jorb.ai/firms/dbs.md) – Singapore, posted 2d ago

---

Updated: 2026-09-19
Canonical: https://www.jorb.ai/jobs/6aa9dc3251c6f45a5df9a418
