Are you People Driven? Do you want to be a part of a dynamic, forward thinking team? We are seeking an experienced Information Security Officer to join our team. Compensation for this position starts at $80,500, but offers can go up depending on experience and transferrable skills.
A Day in the Life:
The Information Security Officer (ISO) protects the organization's IT infrastructure, networks, and data from cyber threats. This position will develop security policies, monitor for breaches, evaluate system vulnerabilities, and ensure compliance with regulatory standards. The ISO also takes a leadership position on the Incident Response team, Disaster Recovery team, and facilitates the use of a Technology Steering Committee as use cases call for it.
Planning & Strategy - Work in conjunction with the Chief Risk Officer (CRO) to design, implement, and maintain a comprehensive enterprise information security program consistent with the mission, vision, and strategic goals of the organization. Provide input and recommendations for future information security infrastructure.
Ensure that the Information Security Program Meet Member's Needs and Requirements - Work to establish consistent risk assessments and security audits to identify vulnerabilities in network architecture, firewalls encryption programs and cloud security protocols.
Communication- As a leader in this area, it is expected that the Information Security Officer will report a summary of happenings within the department to the CRO, so that collaboration can be documented and efficient. It is also expected that the person serving in this role will communicate effectively to other team members regarding the status of projects, process changes, system updates, etc.
Day to Day Activities- Develop and enforce information security policies, standards and guidelines across the organization. Monitor the external threat landscape and lead investigations into security breaches. Participate in business continuity and disaster recovery plans. Educate staff and executive leadership on technology risks and secure computer practices. Collaborate with outside vendors as needed to support the vendor management program.
Compliance- Must comply with and support all the credit union's policies and procedures as outlined in the Comprehensive Information Security Program and Team Member Handbook, as well as regulatory requirements such as The Bank Secrecy Act (BSA), Office of Foreign Asset Controls (OFAC), etc.
Requirements
Education:
A bachelor's degree or the equivalent combination of education, training and experience is required.
Experience:
Minimum of 3 years' experience in IT, network security and/or risk management.
Minimum of 1 year supervisory experience preferred.
Experience within a financial institution or credit union preferred.
** Must pass drug screen and background check.
