certificate of Fitness F03/F04 Fire Guard certificate of Fitness F03/F04 - HD Security Services Inc - New York

Lead electronic security projects in Manhattan with a growing systems integration team. Salary: $98,056 - $156,869 per year A bit about us: We are a systems integrator delivering electronic security and building technology projects for customers across New York. Job Details Plan and direct electroni

Position Summary We are looking for an experienced Security Architect with strong Application Security expertise who can lead security across a portfolio of complex technology initiatives within BBVA CIB US. This is a hands-on security leadership role combining security architecture, application security and project security management. The successful candidate will work with engineering and business teams from early design through production, reviewing solution architectures, identifying security risks, defining security requirements and ensuring agreed controls are implemented. The role requires someone who can manage multiple initiatives simultaneously, prioritize security activities based on risk, and independently drive projects through the security lifecycle while partnering with Corporate Security Architecture, Engineering, Application Development, Infrastructure, Cloud, Risk and business stakeholders. Key Responsibilities • Perform security architecture reviews and threat modeling for applications, APIs, cloud services, infrastructure and third-party solutions., • Evaluate architecture patterns covering authentication and authorization, IAM, encryption, secrets/key management, APIs, network segmentation, data protection, cloud security and secure integration patterns, • Validate that approved architecture and security controls have been implemented as designed before production deployment., • Own the security workstream for multiple concurrent technology initiatives, establishing security deliverables, dependencies, priorities and milestones and proactively driving them to completion., • Manage a portfolio of security engagements simultaneously, prioritizing activities based on business criticality, architecture complexity, security risk and delivery timelines., • Identify security-related project risks and dependencies early, escalate blockers when necessary, and ensure security activities do not become a late-stage impediment to delivery., • Participate in project governance meetings and provide security guidance to project teams., • Review Security Models produced by Corporate Security Architecture., • Assess proposed architectures for alignment with BBVA security standards and U.S. regulatory requirements., • Provide delegated Security Architecture and Application Security support for local initiatives., • Identify security gaps and recommend compensating controls where appropriate., • Review initiatives that may fall outside the standard lifecycle process, including third-party platforms, trading venues, and standalone SaaS solutions., • Validate that approved security controls are implemented as designed prior to production deployment., • Serve as the primary security advisor for assigned projects., • Collaborate with Corporate Security Architecture, Enterprise Architecture, Technology Engineering, Application Development, Infrastructure, Risk, Compliance, and business stakeholders. Qualifications and Experience • Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or related field (or equivalent experience)., • 10+ years of experience in Information Security, Security Architecture, Application Security, Infrastructure Security, or Cybersecurity Engineering., • Experience participating in technology projects and implementing security controls., • Strong understanding of network security, cloud security, identity and access management, application security, and infrastructure security., • Experience performing security risk assessments and architecture reviews., • Familiarity with financial services security requirements and regulatory expectations., • Excellent written and verbal communication skills., • Ability to influence cross-functional teams without direct authority., • Experience in banking or financial services., • Knowledge of cybersecurity and regulatory frameworks including NIST Cybersecurity Framework (NIST CSF), NIST 800-53, ISO 27001, CIS Controls, New York DFS Cybersecurity Regulation (23 NYCRR Part 500), SEC cybersecurity requirements, NFA cybersecurity requirements, FFIEC Guidelines, EU DORA (Digital Operational Resilience Act), SWIFT Customer Security Controls Framework (CSCF), FedLine security requirements, CHIPS-related security requirements, and CRI Profile, or similar frameworks., • Experience reviewing cloud architectures (Azure, AWS, or GCP)., • Knowledge of AI security, third-party risk, and secure software development practices., • Professional certifications such as CISSP, CCSP, GCSA, CCSK, CSSLP, SANS certifications (GWEB) and others., • Strong competencies in Security Architecture, Project Security Governance, Risk Assessment, Application Security, Infrastructure Security, Cloud Security, Regulatory Compliance, Security Control Validation, Stakeholder Management, Analytical Thinking, Problem Solving, and Communication & Collaboration, • Spanish proficiency is a plus All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. With respect to this position in our New York Office, the expected base salary ranges from $185,000 to $200,000. It is not typical for offers to be made at or near the top of the range. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications obtained. Market and organizational factors are also considered. In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus. *Employment eligibility to work with BBVA in the U.S. is required as the company will not pursue visa sponsorship for these positions

About Us IFM Investors is a global asset manager, founded and owned by pension funds, with capabilities in infrastructure equity and debt, private equity, private credit, real estate and listed equities. Our purpose is to invest, protect and grow the long-term retirement savings of working people. We believe healthy returns depend on healthy economic, environmental and social systems - and these are evolving on a scale never experienced before. To find opportunity, build value and meet the needs of future generations, you need scale, skill and expertise. That’s what IFM Investors has built up over 30 years. With assets under management of approximately $291.1 AUD billion (at 30 June 2026), we prioritise the interests of over 883 institutional investors worldwide. IFM operates from 17 offices across Australia, Europe, North America and Asia. The Opportunity At IFM, you’re not just part of an investment company – but an invested one. We see the work we do as the chance to take sustainable, responsible steps forward for millions of people around the world. So, we have made sure to create a workplace that’s inclusive, accountable and collaborative. Where you’re given the opportunities to make a meaningful contribution and grow your skills. All while feeling valued and supported for who you are and what you bring to the team. Along with the chance to make a meaningful, positive difference from day one, we offer a competitive salary and generous leave entitlements. Our hybrid and flexible approach can vary by team and role, it is built around trust. We encourage our people to manage their work life rhythm in a way that works best for them and their teams. Business Overview Our Operations, Data & Technology team collaborates across the business with a strong emphasis on designing solutions, increasing efficiency and reducing operational risks. The team consists of several areas of specialisation including: • Transaction Management & Support, • Investment Operations & Client Service, • Investment Risk & Execution Oversight, • Business Transformation, • Investment Accounting & Tax Services, • Implementation, • Information Technology The Role The Senior Security Analyst will contribute to the successful delivery of information security services, including monitoring, diagnosing and resolving security events and incidents. The role provides technical expertise in recommending, developing, implementing and monitoring enterprise-wide information security policies and procedures, researching solutions to information security issues, and promoting information security awareness. Key Responsibilities • Strategic Planning- Understand the IFM Investors’ Business Plan. Business Performance • Understand IFM Investors’ long term revenue and profitability by understanding the metrics and targets., • Understand and contribute to other business plan targets. User Support • Provide support, including troubleshooting system failures, pre-emptively identifying and resolving issues, and delivering user training., • Perform administration tasks that enable business groups within IFM to carry out day-to-day activities., • Manage vendors to support timely resolution of requests and problems. Stakeholder Management • Engage effectively with IFM users to understand reported issues and received requests and deliver the appropriate solution or service., • Liaise with IT Managers, Team Leaders and colleagues regarding potential problems., • Liaise with external software vendors and service providers to resolve issues as appropriate. Policy and Process Management • Comply with all policies and delegations applicable to the activities and decisions required in this role. Functional Analysis • Continually monitor networks, servers, endpoints and cloud applications., • Provide cyber security subject matter expertise to internal and external stakeholders., • Conduct vulnerability assessments, security audits and reviews., • Analyse trends in operational incidents and raise problem tickets to address underlying causes., • Proactively identify areas of risk, investigate root causes and propose mitigation strategies., • Automate, improve and innovate cyber security activities. Performance Measures • Delivery of specific team and individual goals, change requests and incident resolutions., • Feedback from IFM business users, application business owners and IT colleagues on the effectiveness of cyber awareness and services., • Assessment by the Associate Director Information Security of overall performance outcomes described in the annual Performance Plan., • Contribution to the achievement of IFM Investors’ Five Year Strategic Goals. Your Background and Experience Experience • Experience in Investment Management or a related area., • 10+ years’ experience providing IT operational support or in a related area., • A mix of hands on technical and risk element experience Qualifications • Tertiary qualifications in IT or a related discipline., • Preferably 10+ years’ IT experience, with strong experience in information security principles and concepts, particularly at a technical level., • Strong background in Microsoft desktop/server, Microsoft Azure and cloud technologies, security, and networking technologies., • Knowledge of security frameworks, standards and controls, such as NIST and Essential Eight., • Exposure to developing information security policies and governance frameworks., • Exposure to IT security operations in a large or complex organisation., • In-depth experience or understanding of IT security tools and controls. Business Knowledge • Preferably an IT degree with exposure to cyber security processes and procedures., • Demonstrated experience within an information systems environment., • Knowledge of risk analysis, application and system software, including security software and hardware, and related capabilities and performance characteristics., • Understanding of technical security safeguards and the principles, theories, techniques, practices, policies and procedures of information security., • Knowledge of data communications and the concepts, theories and practices of advanced technologies., • Strong written, oral and presentation skills., • Demonstrated analytical, problem-solving and interpersonal skills., • Proven experience with troubleshooting principles, methodologies and issue-resolution techniques., • Confident engaging directly with users and vendors., • Works effectively under time pressure to resolve issues., • Stakeholder engagement and management., • Procedure documentation and training. Technical Knowledge • Understanding of cyber security identification, prevention, detection, response, recovery and mitigation., • Understanding of risk management frameworks., • Excellent knowledge of Microsoft operating systems and applications in relation to best practice hardening and security configuration., • Security knowledge across firewalls, web, email and endpoint protection., • Knowledge of identity management tooling, information protection tools, data loss prevention technologies and cloud security posture management. The anticipated base salary range for this position is listed below. Exact compensation amount may vary and will be determined by several components including but not limited to the individual’s experience, skills and qualifications. Total compensation for this role includes eligibility for a discretionary performance-based bonus. $174,000-$220,000 USD IFM also offers robust benefits offerings which include but is not limited to Comprehensive Medical, Dental and Vision plans (significant employer subsidy), 401(k) program with company match; Flexible Savings Accounts (FSA), Life Insurance, Long-Term Disability (LTD) and Short-Term Disability (STD) Insurance; Employee Assistance Program (EAP), Commuter Benefits and Headspace subscription. Ready to invest in what matters? With IFM, that includes your own career. Visit ifminvestors.com/careers to find out more. IFM Investors is committed to promoting an inclusive culture where all employees are valued and recognised for their unique qualities, backgrounds, and perspectives. We champion all groups regardless of race, gender, religion, sexual orientation, age, disability, or family status. We are committed to providing individuals with disabilities reasonable adjustments to participate in the job application or interview process. Please contact us if you require specific support at any stage of the recruitment process at Careers@ifminvestors.com

Overview The Director of Security will be responsible for overseeing all security operations of a Class A commercial building. This position will be responsible for scheduling and training Security Officers and Fire Life Safety Directors. You must be accessible 24/7 to address emergency incidents affecting the assigned property. The Director of Security must demonstrate strong leadership skills as well as excellent surveillance and emergency response skills, in addition to knowledge of all hazards and threats to safety. The Director of Security is a supervisory and management role that requires ensuring that all assigned Security Officers and Fire Life Safety Directors are performing up to client expectations and QPS standards. The position requires the following, non-negotiable characteristics: • Precision and accuracy in the performance of all duties., • Direct, articulate and succinct communication style, both verbal and written., • Mastery of organizational skills, including management of multiple tasks and deadlines., • Analysis of issues with a methodical and efficient, yet thorough, approach., • Self-motivation to be proactive in identifying problems and developing recommended solutions., • Self-discipline to always conduct oneself with the utmost professionalism, integrity, reliability and accountability. Duties and Responsibilities • Lead a team of security and fire life safety personnel in their day-to-day duties and responsibilities., • Develop and implement security policies, protocols and procedures., • Oversee physical safety and security of the building, employees, vendors, contractors, and visitors., • Maintain a secure environment and provide emergency evacuation and safety procedures to ensure safety of building occupants., • Ensure security staff is prepared with all equipment, uniforms and supplies necessary to meet property’s needs and service expectations., • Make certain that all security and fire life safety personnel maintain current New York State guard licenses and FDNY certificates of fitness and complete required yearly training., • Develop training plans for security and fire life safety personnel, maintain training records; regularly monitor performance and provide coaching for performance improvement and development, discipline, retraining and termination, if necessary., • Create and maintain officer post orders and shift schedules; ensure all posts are staffed with qualified, trained personnel., • Ensure that all required testing, drills and inspections are completed in a timely manner and comply with FDNY code and regulation requirements., • Develop, implement and maintain a security risk management plan for the building’s safety program to reduce liability and mitigate risk., • Reconcile security logs against shift responsibilities and patrols; review incident reports prior to submitting to building management., • Manage and report security incidents and threats to Management., • Establish a working relationship with appropriate law enforcement, intelligence and threat assessment agencies to identify, quantify and assess security threats to the building and to provide recommendations to building ownership regarding suitable mitigation measures., • Monitor and report on security checks and building surveillance., • Authorize access to building and ensure that access is controlled., • Have a thorough understanding and working knowledge of all building security systems to include existing access controls, security electronic monitoring, and CCTV systems., • Maintain and review security records; periodically report on trends, anomalies, and concerns., • Conduct site surveys and provide recommendations to Management regarding security system upgrades which may include access control, security electronic monitoring, and CCTV systems., • Staff schedule must be monitored daily to ensure that all open officer posts are filled and all approved vacation and time off is coordinated in advance to avoid any unnecessary overtime., • Coordinate vacation and schedule vacation with officers., • Provide training to all permanent and replacements officers., • Control weekly hours and ensure QPS is on budget., • Schedule FSD tests and assist with training., • Coordinate F01 certification for each officer., • Oversee all license expirations and coordinate necessary extensions., • Respond 24/7 to inquiries by phone or in-person, as the situation requires., • As directed or required interview candidates for hire at the location to validate their qualifications and abilities, and make recommendations., • Correct and document minor infractions of company or building policies through verbal warning, training, or memos., • Document matters that may require formal discipline on appropriate QPS documents and preserve all evidence/information including, but not limited to, records, witness statements, reports, video, etc., • Familiarize oneself with applicable labor laws and Collective Bargaining Agreements and, • ensure compliance., • Respond to, investigate and prepare reports relating to serious, sensitive or critical incidents or matters. Requirements: • 7+ years proven experience as a security manager, Class A office building preferred., • Minimum 10 years prior Law Enforcement experience (strongly preferred)., • Experience using relevant technology and equipment (e.g. CCTV, access controls)., • Experience in reporting and emergency response planning., • Excellent knowledge of security protocols and procedures., • Excellent communication and interpersonal skills., • Outstanding organizational and leadership skills., • Committed and reliable., • Must be available 24/7 to address emergencies and incidents., • FLSD certification and private investigator license preferred.

Job title: Vulnerability Management Analyst Job Type: Contract W-2 Job Location: New York, New York (3 days onsite) A global bank is seeking a Vulnerability Management Analyst to join their New York office. The vulnerability Patch Management Analyst will be responsible for analyzing all relevant cyber security event data and other data sources for attack indicators and potential security breaches; produce reports ( Data sets, pivot tables etc.), assist in coordination during incidents; and coordinate with defense teams to ensure all security monitoring systems on-line, up to date and operational. The duty of the analyst includes managing and optimizing our vulnerability and patch management process. Working with cross-functional teams across the Americas platform and with Head Office, the Vulnerability Patch Management Analyst will drive daily operations, lead initiatives You will be responsible for developing and presenting key performance indicators (KPIs), adapting to key risk indicators (KRIs) The Vulnerability Patch Management analyst will • Drive the full vulnerability patch management lifecycle: identification, prioritization, and remediation for all infrastructure, systems, applications, and SDLC., • Deliver consistent, high-quality VPM reporting to leadership and relevant teams., • Collaborate extensively with IT stakeholders across the Americas, Head Office, and international platforms., • Assess vulnerability impact and risk levels to inform strategic remediation., • Prioritize patch deployments and manage SLA breaches, developing and executing follow-up plans., • Design and enhance VPM procedures and processes., • Participate in vulnerability assessments and track software/system updates., • Strengthen compliance and adherence to security best practices and approved tools., • Liaise with Second Line of Defense and auditors., • Coordinate the development and maintenance of a comprehensive patch management strategy., • Assist IT teams with timely vendor patch acquisition and deployment., • Monitor and report on patch management effectiveness, implementing improvements., • Stay current on industry best practices and emerging threats., • Provide backup support for cybersecurity projects, incidents, and audit remediation., • Be available for off-hours support as needed to address emergent threats. Skills: • Proven experience in vulnerability management, patch management, or related security roles with oversight of Plans of Action and Milestones (POAM)., • Ai initiatives – ability to use Ai to automate manual processes and tasks., • Strong understanding of common security vulnerabilities and the ability to assess their impact on systems and infrastructure., • Experience with vulnerability management and SIEM tools., • SIEM experienced with creating dashboard and report, • Vulnerability Tool experience in conducting scan, treatment, and remediation, • Familiarity with security, IT Audit frameworks and standards (NIST. FFIEC handbooks etc.), • Experience on reporting and analysis tools is required - PowerBl, Advanced Excel/PowerQuery., • Data sets, pivot tables etc., • Script experience, • Enhancement of existing documentations including procedures, playbooks, and runbooks, • Deep understanding of network devices and architecture, TCP/IP, network protocols, server operating systems, and vulnerability scanning., • Strong understanding of internal control concepts and policies with focus on improving process/procedure manuals and documentation., • Strong knowledge of cyber-security frameworks (such as ISO 27001, NIST CSF, CIS, etc.), • Knowledge of Windows, Linux/Unix, VMware, IDS/IP, forensic discovery., • Strong interpersonal and communication skills and the ability to work effectively with a wide range of constituencies in a diverse community., • 5-9 years of experience