Position Summary

The Information Technology Risk Manager is responsible for the oversight and execution of any and all IT security related technologies. This individual would assist the Senior Vice President of Information Technology in developing and implementing the Bank's IT security/cybersecurity strategy. In addition, a key function of this role will be to serve as the project manager for new technology initiatives ensuring deployments are properly planned, coordinated and documented and that appropriate safeguards are administered.

Responsibilities

The IT Risk Manager will be responsible, with the support of the SVP, Information Technology, for establishing and sustaining the Bank's technology security systems/initiatives that will include, but not be limited to the following:

Management of the Bank's firewall program.

Oversight of the Bank's desktop patch management program.

Administration of the Bank's anti-malware systems, (in collaboration with the Information Security Department)

Administration of the Bank's password management program.

Development of IT departmental security policies and procedures.

Serve as liaison with technology consultants, vendors, and auditors.

Participates in audits, and assessments involving IT security and provide support, as appropriate.

Help facilitate preparations for regulatory examinations.

Oversight of the IT security alert monitoring program.

Conduct incident response investigations and document accordingly, (in collaboration with the Information Security Department)

Participate in incident response and business continuity tabletop activities.

Monitor advisories for industry technology concerns. Evaluate potential scenarios and actual incidents to incorporate sound reaction plans, comprehensive documentation, and upgrading of policies and procedures accordingly.

Review and coordinate IT policies to ensure regulatory compliance and effective change management measures are in place.

Direct and coordinate information technology projects to ensure adherence to bank policies and associated risk assessments take place.

Maintain and review appropriate IT project planning documentation.

Ensure all project stakeholders feel well communicated with and that training is considered as part of all initiatives.

Assist SVP/ IT Manager with the maintenance of Bank's BCP program, including scheduling and conducting disaster recovery tests.

Serve as member of the Information Technology Steering Committee.

Be familiar with all FFIEC and FDIC-FIL recommendations.

Possess a strong understanding of AI, and the capability to leverage AI to facilitate responsibilities.

Work with the Information Security Officer to help support the Bank's Information Security Program, as applicable.

Consider obtaining IT security certifications such as CISM (Certified Information Security Manger), CISSP (Certified Information System Security Professional) or CISA (Certified Information Systems Auditor).

Provide support for Help Desk as needed or directed.

Assume responsibility for other functions within the department as needed or directed.

Supervisory Responsibilities

Number of employees supervised: NA

Title(s) of employees supervised: NA

Experience

Bachelor's degree (B. A.) from four-year college or university and 5 years plus related experience and/or training; or equivalent combination of education and experience in an IT or banking related position.

Starting pay for an IT Risk Manager is $110,000 to $137,000 annually, aligned to relevant experience, skills, and internal equity. Final offers consider job-related experience, specialized skills, and internal equity and are not based on salary history.

Specific Skills Required

Computer Skills

Specialized skills in the theory and logic of technology; operating systems, network systems, banking systems and the full spectrum of applications used by bank staff. An awareness of the Bank's network structure, including a basic understanding of the LAN and Wan topologies, servers, firewall and router placements and operating systems. Additionally, a strong understanding of VDI environments.