Senior Information Risk Officer

Columbia Banking System, Inc.

$85K — $120K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • H.S. Diploma/GED required, Bachelor's Degree in Computer Science preferred.
  • 7-10 years of experience in information security, IT audit, or technology operations required.
  • Strong knowledge of information security frameworks including ISO 27002 and NIST 800 series.
  • Experience with financial services regulatory frameworks such as FFIEC IT booklets.
  • Proficient understanding of regulatory requirements including PCI DSS, GLBA, and HIPAA.
  • Demonstrated knowledge of systems/network concepts and information security practices.
  • Ability to operate cross-functionally and build strong interdepartmental relationships.

Responsibilities

  • Lead information governance and compliance initiatives for risk management.
  • Maintain documentation related to information security and governance procedures.
  • Conduct risk assessments based on industry standards like CIS, ITIL, and COBIT.
  • Analyze technology controls for compliance and security adherence.
  • Provide advisory expertise to technology teams on compliance readiness.
  • Track and monitor gaps in bank risk programs and suggest improvements.
  • Facilitate communication between technology and corporate risk groups to ensure alignment.

Benefits

  • Comprehensive healthcare coverage including medical, dental, and vision plans.
  • 401(k) retirement savings plan with employer match.
  • Employee assistance program and life/disability insurance.
  • Tuition assistance and mental health resources available.
  • Identity theft protection and legal support offered.
  • Access to discounts for auto, home, and pet insurance.
  • Paid vacation, sick days, volunteer days, and holidays.
Full Job Description
About the Role:

Responsible for leading information governance, risk, and compliance efforts, including the establishment and maintenance of key risk management, monitoring, and validation activities and facilitating the development of relevant policies and standards.

  • Maintain governance documentation detailing how information should be secured including the maintenance and development of internal process/procedure documentation.
  • Perform formal risk assessments and self-assessments for key processes and technologies, leveraging industry standards like CIS, ITIL, and COBIT to build a unique program for Columbia Bank.
  • Analyze internal technology and security controls to ensure compliance with documented and approved standards. Ensure that information systems and vendors within the Bank's operating environment comply with company policies, standards, and procedures.
  • Drive and provide advisory and subject-matter expertise to technology teams and business units for compliance readiness.
  • Responsible for tracking and monitoring gaps in key Bank risk programs. Maintain gap analysis documents; gather necessary information from technology and lines of business to identify areas to improve banking practices.
  • Identify new assets or vendors and oversee the risk evaluation process to determine the risk ranking.
  • Facilitate and liaise with technology leaders, key corporate risk and operational groups (including TPO, TAG, Internal Audit, Corporate Compliance, Enterprise Risk Management, Legal) to ensure alignment with these groups and meet obligations.
  • Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities - knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
  • Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
  • Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation P, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
  • May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
  • Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
  • Takes personal initiative and is a positive example for others to emulate.
  • Embraces our vision and strategic direction
  • May perform other duties as assigned.


About You:
  • H.S. Diploma/GED (preferred)
  • Bachelor's Degree in computer science or equivalent (preferred)
  • 7-10 years - of experience in or a combination of information security, IT audit, or information technology operations. (Required)
  • Knowledge of risk management processes including information security management. Experience evaluating controls relative to information security frameworks such as ISO 27002, NIST 800 series, or financial services regulatory frameworks such as the FFIEC IT booklets and Cybersecurity Assessment Tool (CAT).
  • Knowledge of systems and network concepts including: access, authorization, configuration, and design.
  • Demonstrated understanding of information security concepts including: encryption, access controls, network security, security operations, security architect, threat modeling and design.
  • Knowledge of applicable regulatory requirements including PCI DSS, GLBA and HIPAA.
  • Ability to operate in a cross-functional environment, build, and foster relationships with other departments and stakeholders.
  • Ability to anticipate and respond to changing priorities and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness.


Travel Requirements
  • Occasional


The pay range for this role is $85,000.00 - $120,000.00.

The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.

Primary Location: Ability to work fully onsite at posted location(s).

111 N Wall St Building Spokane WA 99201

Our Benefits:

We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.

We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.

Similar Jobs

More Jobs at Columbia Banking System, Inc.

  • Software Engineer
    $68K — $120K *
    Hillsboro, OR 97124 (Washington County)
    Information Technology
    In-Person
  • Network Security Engineer
    $115K — $140K *
    Phoenix, AZ 85032 (Maricopa County)
    Information Technology
    In-Person
  • Com'l Underwriter
    $62K — $110K *
    Salem, OR 97301 (Marion County)
    Finance & Insurance
    In-Person
  • Trust Operations Administrator
    $77K — $106K *
    Denver, CO 80219 (Denver County)
    Finance & Insurance
    In-Person
  • Senior IT GRC Analyst
    $80K — $165K *
    Los Angeles, CA 90011 (Los Angeles County)
    Information Technology
    In-Person

More Information Technology Jobs

Find similar Senior Information Risk Officer jobs: