The Director of Cybersecurity leads the credit union's cybersecurity program and is responsible for protecting member information, technology systems, and critical business services from cybersecurity threats. This position provides strategic and operational leadership across cybersecurity risk management, security operations, incident response, vulnerability management, identity and access management, third-party security, regulatory compliance, and security awareness.
The Director partners with Technology, Risk Management, Compliance, Internal Audit, business leaders, and executive management to ensure cybersecurity risks are identified, communicated, and effectively managed.
Major Duties and Responsibilities- Develop and execute the credit union's cybersecurity strategy, roadmap, policies, standards, and security program.
- Lead security operations, monitoring, threat detection, vulnerability management, and incident response.
- Conduct and oversee cybersecurity risk assessments and ensure identified risks are appropriately mitigated.
- Oversee identity and access security, including privileged access, strong authentication, least privilege, and access reviews.
- Assess the cybersecurity posture of critical vendors and participate in technology vendor due diligence.
- Ensure cybersecurity practices align with applicable NCUA, FFIEC, and other regulatory expectations.
- Coordinate cybersecurity audits, examinations, penetration tests, and remediation activities.
- Maintain and regularly test the cybersecurity incident response program.
- Develop and oversee employee cybersecurity awareness and phishing-testing programs.
- Evaluate emerging threats, technologies, and security solutions and recommend appropriate investments.
- Develop meaningful cybersecurity metrics and communicate security risks and program effectiveness to executive management and the Board.
- Lead and develop cybersecurity staff and manage security vendors and service providers.
- Independently escalate significant cybersecurity risks to executive management and the appropriate Board committee.
Knowledge and Skills- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field, or equivalent professional experience.
- Significant progressive experience in cybersecurity, information security, technology risk, or related IT disciplines.
- Demonstrated experience leading cybersecurity programs, teams, or security operations.
- Strong knowledge of incident response, vulnerability management, identity security, security monitoring, risk assessment, and cloud/network security.
- Experience in a regulated environment; financial institution or credit union experience strongly preferred.
- Ability to translate complex technical risks into clear business terms for executives and Board members.
- Strong leadership, communication, analytical, and problem-solving skills.
Preferred CertificationsCISSP, CISM, CRISC, GIAC, or other relevant cybersecurity certifications.
What Success Looks LikeSuccess in this role means maintaining a mature, risk-based cybersecurity program that protects member information, strengthens organizational resilience, meets regulatory expectations, effectively manages third-party cyber risk, and provides leadership with clear visibility into the credit union's cybersecurity posture.
ADA RequirementsPHYSICAL REQUIREMENTS
Is able to bend, sit, and stand in order to perform primarily sedentary work with limited physical exertion and occasional lifting of up to 10 lbs. Must be capable of climbing / descending stairs in an emergency situation. Must be able to operate routine office equipment including computer terminals and keyboards, telephones, copiers, facsimiles, and calculators. Must be able to routinely perform work on computer for an average of 6-8 hours per day, when necessary. Must be able to work extended hours or travel off site whenever required or requested by management. Must be capable of regular, reliable and timely attendance.
WORKING CONDITIONS
Must be able to routinely perform work indoors in climate-controlled shared work area with minimal noise.
MENTAL AND/OR EMOTIONAL REQUIREMENTS
Must be able to perform job functions independently or with limited supervision and work effectively either on own or as part of a team. Must be able to read and carry out various written instructions and follow oral instructions. Must be able to complete basic mathematical calculations, spell accurately, and understand computer basics. Must be able to speak clearly and deliver information in a logical and understandable sequence. Must be capable of dealing calmly and professionally with numerous different personalities from diverse cultures at various levels within and outside of the organization and demonstrate highest levels of customer service and discretion when dealing with the public.
Must be able to perform responsibilities with composure under the stress of deadlines / requirements for extreme accuracy and quality and/or fast pace. Must be able to effectively handle multiple, simultaneous, and changing priorities. Must be capable of exercising highest level of discretion on both internal and external confidential matters.
