Banking Information Security Leader - Risk & Compliance

The Dime Bank; Honesdale (Wayne County); On-site; USD 110,000 - 140,000; Full time

Job summary

The Dime Bank is seeking an Information Security Officer to lead its cybersecurity governance, risk management, and regulatory compliance programs. You will shape the Information Security Program, align controls with frameworks (NIST CSF 2.0, CIS Controls, ISO/IEC 27001), and report to executive management and the Board.

You will drive incident response, vendor security oversight, employee training, and cyber resilience initiatives, ensuring protection of sensitive data and adherence to GLBA,

Qualifications

• Bachelor's degree or higher in information security, cybersecurity, IT, risk management, CS, or related field.
• Minimum five years in information security or IT risk management; at least three years in a leadership role.
• Relevant security certifications (CISSP, CISM, CCSP) preferred but not required.

Responsibilities

• Develop and manage the Bank's Information Security Program and policies.
• Lead cybersecurity governance, risk management, and regulatory compliance.
• Oversee incident response and recovery planning.
• Monitor third-party vendor security practices.
• Provide training and awareness programs for employees and board.
• Coordinate regulatory examinations and security assessments.

Skills

Reading & writing

Interpersonal skills

IT security skills

Communication skills

Driver's license

Education

Bachelor’s degree in information security or related field

Master’s degree preferred

Job description

The Dime Bank is seeking an Information Security Officer to lead its cybersecurity governance, risk management, and regulatory compliance programs. You will shape the Information Security Program, align controls with frameworks (NIST CSF 2.0, CIS Controls, ISO/IEC 27001), and report to executive management and the Board.

You will drive incident response, vendor security oversight, employee training, and cyber resilience initiatives, ensuring protection of sensitive data and adherence to GLBA,