Banking Information Security Lead — Risk & Compliance

Fortis Bank; Denver (CO); On-site; USD 180,000 - 240,000; Full time

Job summary

Fortis Bank, based in Denver/Salt Lake City markets, seeks an Information Security Officer responsible for protecting sensitive data, ensuring regulatory compliance, and minimizing risk in a changing threat landscape. The role requires expertise in banking regulations, FDIC examinations, and audits for mid-sized banks.

The successful candidate will lead security strategy, governance, risk assessments, and incident response, while coordinating with regulators, executives, and cross‑functional

Qualifications

• Bachelor’s degree in information security, CS or related field (Master’s preferred).
• 7–10 years in information security with at least 3 years in a leadership role within banking/financial services.
• Proven experience with FDIC examinations, including preparation, participation, and follow‑up on findings for banks with assets in the $1–2 billion range.
• Experience conducting and managing audits (financial statements, IT general controls, compliance) per GLBA/FFIEC/BSA/AML for mid‑sized community banks.
• Professional certifications such as CISSP, CISM, CRISC or equivalent.
• Hands‑on experience with security technologies (firewalls, IDS/IPS, encryption, endpoint protection).

Responsibilities

• Develop, implement, and maintain information security policies, procedures, and standards aligned with regulatory requirements and best practices.
• Lead risk assessments, vulnerability management, and security incident response; coordinate with internal teams and external partners.
• Oversee design and execution of security controls for IT systems, networks, cloud environments, and third‑party vendors.
• Conduct regular security audits, IT risk assessments, penetration testing, and compliance reviews; identify and remediate weaknesses.
• Collaborate with senior leadership to integrate security into business processes, including new product launches and tech acquisitions.
• Manage security awareness training programs for employees and ensure ongoing education on threats.
• Prepare and present reports on security metrics, risks, and compliance status to executive management and the board.
• Manage the business continuity / disaster recovery program, including annual tabletop exercises.
• Stay abreast of evolving threats, regulatory changes, and tech advancements to enhance security posture.
• Coordinate with regulators during examinations and audits; respond to findings and implement corrective actions.

Skills

Leadership experience

Regulatory knowledge

Risk assessment

Security governance

Communication skills

Incident response coordination

Vendor management

Education

Bachelor's degree in Information Security, Computer Science, or related field

Master's degree preferred

CISSP

CISM

CRISC

Tools

Firewalls

IDS/IPS

Encryption

Endpoint protection

Job description

Fortis Bank, based in Denver/Salt Lake City markets, seeks an Information Security Officer responsible for protecting sensitive data, ensuring regulatory compliance, and minimizing risk in a changing threat landscape. The role requires expertise in banking regulations, FDIC examinations, and audits for mid-sized banks.

The successful candidate will lead security strategy, governance, risk assessments, and incident response, while coordinating with regulators, executives, and cross‑functional