Job Description:

The Information Security Officer (ISO) serves as the Bank’s independent second-line information security leader, responsible for the governance, oversight, risk assessment, reporting, and escalation of cybersecurity and information security risks. Operating within Enterprise Risk Management, the ISO provides independent challenge, evaluates control effectiveness, supports regulatory compliance, and ensures information security risks are appropriately identified, managed, and communicated to Executive Management, the Audit Committee, and the Board. While maintaining overall oversight of the Information Security Program, the ISO remains independent of day-to-day technology operations, security administration, and technical control implementation.

Main Job Tasks and Responsibilities:

Independently assess the effectiveness of information security controls and program.
Identify, assess, and communicate information security risks.
Evaluate Information Security Program maturity and eff
Challenge management decisions relating to information security risk.
Recommend corrective actions and remediation activities.
Escalate unresolved information security concerns.
Review and recommend changes to information security policies, standards, and
Participate in governance committees and risk management activities.
Provide cybersecurity and information security reporting to Executive Management and the
Audit Committee.
Support regulatory examinations and information requests.
Recommend Information Security Program enhancements and strategic initiatives.
Recommend risk mitigation activities based upon identified threats, vulnerabilities, and control deficiencies.

Education & Experience:

Bachelor’s degree in information security, Cybersecurity, Computer Science, Information Technology, Risk Management, Business Administration, or related field required.
Master's degree preferred.
Minimum 7-10 years of progressive experience in information security, cybersecurity, technology risk management, enterprise risk management, audit, compliance, or related disciplines.
Experience leading information security governance, risk management, compliance, or cybersecurity oversight functions.
Experience interacting with executive leadership, regulators, auditors, and board-level committees within a financial services environment preferred.
Banking or regulated financial institution experience strongly preferred.
One or more of the following Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), or other relevant cybersecurity, risk, or governance certifications.

Key Competencies:

Strong knowledge of cybersecurity governance, information security, risk management, and applicable banking regulations.
Understanding of IT infrastructure, security architecture, cloud technologies, identity and access management, vulnerability management, and incident response.
Advanced analytical, risk assessment, and problem-solving skills with the ability to identify emerging risks and evaluate control effectiveness.
Excellent communication, presentation, and relationship-building skills, including the ability to influence and credibly challenge senior leaders and board-level stakeholders.
Ability to manage multiple priorities and operate effectively in a dynamic, highly regulated environment.

Evolve Bank & Trust

Latest Jobs

Information Security Officer