Banking Information Security Leader — Compliance & Risk

Fortis Bank; Denver (CO); On-site; USD 150,000 - 210,000; Full time

Job summary

Fortis Bank is seeking an experienced Chief Information Security Officer to lead the bank's information security program, ensure regulatory compliance, and strengthen risk posture across a multi-site environment.

The role requires strategic oversight, FDIC-related audits, and collaboration with executive leadership to integrate security into product launches and technology acquisitions while fostering security awareness.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field; Master's preferred.
• 7–10 years in information security with at least 3 years in a leadership role in banking/financial services.
• Experience with FDIC examinations and audits for mid-sized banks ($1–2B assets).
• Experience with GLBA, FFIEC guidelines, BSA/AML frameworks audits.
• Knowledge of NIST CSF 2.0 and CIS 8.1; mapping controls to regulator requirements.
• Professional certifications: CISSP, CISM, CRISC or equivalent.
• Strong communication, leadership, and teamwork skills.

Responsibilities

• Develop and maintain information security policies, procedures, and standards.
• Lead risk assessments, vulnerability management, and incident response.
• Oversee security controls for IT systems, networks, cloud, and vendors.
• Conduct audits, IT risk assessments, penetration tests, and regulatory reviews.
• Collaborate with leadership to integrate security into business processes.
• Manage security awareness training programs for employees.
• Prepare and present security metrics and compliance reports to execs.
• Oversee business continuity/disaster recovery program and tabletop exercises.
• Stay updated on threats, regulatory changes, and technology advancements.
• Coordinate with regulators during examinations and address findings.

Skills

Leadership

Strategic thinking

Communication

Time management

Problem solving

Team collaboration

Education

Bachelor's degree in Information Security or Computer Science

Master's degree preferred

CISSP certification

CISM certification

CRISC certification

Tools

Firewalls

IDS/IPS

Encryption

Endpoint protection

NIST CSF 2.0

CIS 8.1 controls

Job description

Fortis Bank is seeking an experienced Chief Information Security Officer to lead the bank's information security program, ensure regulatory compliance, and strengthen risk posture across a multi-site environment.

The role requires strategic oversight, FDIC-related audits, and collaboration with executive leadership to integrate security into product launches and technology acquisitions while fostering security awareness.