Associate Director, Information Security

First Command Financial Services, Inc.; Fort Worth (TX); Hybrid; USD 140,000 - 190,000; Full time

Job summary

First Command Financial Services, Inc. is seeking an Associate Director to lead Information Security Operations, partner with IT leadership, Risk, Legal, and Compliance, and drive continuous improvement across controls and incident response.

You will oversee daily security activities, coordinate vulnerability management, and develop robust playbooks and metrics to demonstrate security posture to executives.

Qualifications

• Bachelor’s degree preferred.
• 5+ years of experience in information security operations, cybersecurity, or related IT functions.
• Experience leading operational security capabilities such as monitoring, vulnerability management, and incident coordination.
• Experience supporting audit, regulatory, compliance, or risk management activities in financial services.
• Experience in project or program management with reporting and stakeholder communication.

Responsibilities

• Lead and mature the Information Security Operations function, including execution, reporting, and continuous improvement.
• Oversee daily security operations activities, including monitoring, triage coordination, escalation processes, control execution, and operational readiness.
• Coordinate vulnerability management, threat response, incident readiness, remediation tracking, and operational follow-up across teams.
• Develop and maintain operating procedures, playbooks, metrics, dashboards, and leadership reporting for security operations.
• Support audit, regulatory, and risk management activities by providing evidence, control narratives, remediation status, and operational reporting.
• Drive operational improvements that reduce risk, increase response effectiveness, and improve visibility into security posture.
• Supervise employees, provide direction, and monitor progress against tasks and timelines.

Skills

Security operations

Monitoring

Vulnerability management

Incident response

Threat management

Control governance

Cross-functional leadership

Stakeholder communication

Audits support

Documentation

Education

Bachelor’s degree

Job description

Job Description

How will this role impact First Command?

Reporting to the Director, Information Security & Data Privacy, this role is responsible for leading the execution, and continuous improvement of Information Security Operations across First Command Financial Services. The Associate Director will oversee day-to-day operational security capabilities that protect the organization, support regulatory and audit expectations, and improve the effectiveness of security controls. This role partners closely with IT leadership, Infrastructure, Risk, Legal, Compliance, and business stakeholders to ensure security operations are reliable, measurable, and aligned to enterprise priorities. Key areas of focus include, operational control execution, reporting, audit response, process maturity, and team leadership.

Job Description

How will this role impact First Command?

Reporting to the Director, Information Security & Data Privacy, this role is responsible for leading the execution, and continuous improvement of Information Security Operations across First Command Financial Services. The Associate Director will oversee day-to-day operational security capabilities that protect the organization, support regulatory and audit expectations, and improve the effectiveness of security controls. This role partners closely with IT leadership, Infrastructure, Risk, Legal, Compliance, and business stakeholders to ensure security operations are reliable, measurable, and aligned to enterprise priorities. Key areas of focus include, operational control execution, reporting, audit response, process maturity, and team leadership.

What will the employee do in this role?

• Lead and mature the Information Security Operations function, including execution, reporting, and continuous improvement.
• Oversee daily security operations activities, including monitoring, triage coordination, escalation processes, control execution, and operational readiness.
• Partner with Infrastructure, Risk, Legal, Compliance, and business teams to ensure security controls are implemented, operating effectively, and aligned to enterprise risk priorities.
• Coordinate vulnerability management, threat response, incident readiness, remediation tracking, and operational follow-up across technology and business teams.
• Develop and ensure the consistent maintenance of operational procedures, playbooks, process documentation, metrics, dashboards, and leadership reporting for security operations.
• Support audit, regulatory, and risk management activities by providing evidence, control narratives, remediation status, and operational reporting.
• Drive operational improvements that reduce risk, increase response effectiveness, strengthen accountability, and improve visibility into security posture.
• Manage security operations priorities, resource needs, project dependencies, and production support demands without jeopardizing critical operational work.
• Collaborate with project managers and technology leaders to align security operations requirements with enterprise initiatives and implementation timelines.
• Supervise employees in the area of responsibility, provide daily work direction and project assignments, and monitor progress against scheduled tasks.
• Measure team and program effectiveness through agreed-upon operational metrics, service levels, risk indicators, and control performance measures.

Who will this employee lead?

This role manages members of the Information Security team responsible for executing and supporting day-to-day security operations, control activities, incident readiness, vulnerability coordination, and operational reporting. The Associate Director provides work direction, coaching, prioritization, performance feedback, and accountability to ensure the team delivers reliable, timely, and risk-aligned security outcomes.

What skills and qualifications does this employee need?

Education

• Bachelor’s degree preferred

Work Experience

• 5+ years of relevant work experience in information security operations, cybersecurity, technology risk, infrastructure security, or related IT functions.
• Experience leading operational security capabilities such as security monitoring, vulnerability management, incident response coordination, threat management, access/security control operations, or security tooling support.
• Experience supporting audit, regulatory, compliance, or risk management activities in a financial services, banking, or similarly regulated environment.
• Experience in project, program, or operational management, including prioritization, resource coordination, reporting, and stakeholder communication.
• A minimum of 3 years’ leadership experience managing teams, vendors, operational processes, or cross-functional security initiatives.

Certifications

• Information security, cybersecurity, risk, or technology certification preferred, such as CISSP, CISM, CISA, CRISC, Security+, GIAC, or equivalent experience.

Required Knowledge, Skills And Abilities

• Strong understanding of information security operations, security controls, incident response processes, vulnerability management, threat management, and operational risk reduction.
• Ability to translate technical security issues into business risks, priorities, action plans, and executive-level updates.
• Experience developing and maintaining operating procedures, playbooks, evidence packages, metrics, dashboards, and status reporting.
• Demonstrated ability to coordinate across technical teams, business stakeholders, vendors, audit, compliance, and risk partners to drive timely outcomes.
• Strong analytical, problem-solving, prioritization, and decision-making skills in a timeline-driven operational environment.
• Passion for well-organized documentation, repeatable processes, measurable controls, and operational accountability.
• Ability to manage multiple operational and project priorities, including staffing considerations, planning, resource allocation, timelines, and production support demands.
• Excellent communication skills for setting expectations, clarifying assignments, escalating risks, and keeping team members and stakeholders focused on priorities.
• Demonstrated ability to manage, coach, and develop a highly technical and diverse team while fostering collaboration, accountability, and continuous growth.

LI-NC1
LI-Hybrid