Banking Information Security Leader - Compliance & Risk

UKG; Denver (CO); On-site; USD 130,000 - 186,000; Full time

Job summary

UKG is seeking an Information Security Manager to support the CISO in developing and implementing information security for UKG National Trust Bank (NTB). The role interfaces with IT, IS, and multiple departments to ensure policy, risk assessments, and audits are executed effectively.

The candidate will lead security initiatives, manage risk, and contribute to governance, training, and incident response within a banking context.

Qualifications

• 10+ years in information security, IT, audit, or senior cybersecurity role.
• Knowledge of security frameworks (NIST, ISO 27001), risk management, and policy development.
• Experience with data privacy regulations and FFIEC banking requirements.
• Ability to lead cross-functional teams and communicate with executives.

Responsibilities

• Assist in developing and implementing NTB information security strategy aligned with regulatory requirements.
• Oversee protection of NTB data, IP, and technology assets from threats.
• Develop and update security policies, procedures, and controls.
• Identify and mitigate security risks; contribute to audits and compliance activities.
• Coordinate with IT and Infosec teams to integrate security into operations.
• Create security dashboards and monitor metrics (KRIs, KPIs).
• Plan and oversee business continuity and disaster recovery testing.

Skills

Information Security

Cybersecurity

Risk Management

Policy Development

Auditing

Leadership

Education

Bachelor's degree in IT or related field

Tools

SIEM

Firewalls

Intrusion Detection

Cloud Security

Job description

UKG is seeking an Information Security Manager to support the CISO in developing and implementing information security for UKG National Trust Bank (NTB). The role interfaces with IT, IS, and multiple departments to ensure policy, risk assessments, and audits are executed effectively.

The candidate will lead security initiatives, manage risk, and contribute to governance, training, and incident response within a banking context.