Chief Information Security Officer

Job Summary: Responsible for establishing and maintaining the bank’s information security strategy, policies, and programs to protect information assets, customer data, and financial transactions from cyber threats.

Education/Experience: A minimum of the following education/experience is required:

• Bachelor’s degree in Cyber Security, Information Technology, Computer Science plus 5+ years experience; OR
• Master’s degree in Cyber Security, Information Technology, Computer Science

Job Specific Responsibilities:

• Develops and implements a comprehensive information security strategy aligned with the bank’s objectives.
• Establishes and enforces information security policies, procedures, and best practices.
• Provides strategic security guidance to executive leadership and the board of directors.
• Leads the development and execution of cybersecurity initiatives to mitigate risks.
• Identifies, assesses, and manages cybersecurity risks across the organization.
• Ensures compliance with relevant regulations (e.g., GLBA, FFIEC) and industry standards.
• Oversee audits, risk assessments, and security testing to identify vulnerabilities.
• Collaborates with legal and compliance teams to address cybersecurity-related legal and regulatory requirements.
• Implements security monitoring, threat detection, and response mechanisms.
• Leads incident response efforts and coordinate with law enforcement and regulatory agencies during security breaches.
• Oversees security awareness training for employees and ensures adherence to security policies.
• Oversees the deployment and maintenance of security technologies, including firewalls, intrusion detection systems, and encryption.
• Ensures secure design and architecture of digital banking systems, ATMs and payment networks.
• Collaborates with IT teams to integrate security into IT infrastructure and cloud computing strategies.
• Enforces identity and access management policies.
• Conducts regular access reviews to ensure compliance and minimize risks.
• Oversees bank’s IDP and works to improve and secure authentication.
• Conducts regular asset and threat-based risk assessments and provide reports to executive management.
• Recommends and tracks implementation/compliance with security baselines.
• Leads Vendor Management program by evaluating risk of vendors, establishing controls, and working with vendor owners to perform due diligence reviews.
• Leads Business Continuity Program to ensure continued bank resilience and availability.
• Other duties as assigned.