Banking Information Security Leader | Risk, Compliance & Response

Paylocity; Honesdale, Northern (Wayne County, KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

The Bank seeks an Information Security Officer to lead the development and execution of its information security program, governing risk, compliance, and incident response. You will present cyber risk metrics to executive management and the Board, and drive security awareness across the organization.

Ideal candidates have at least five years in information security with leadership experience, familiarity with NIST CSF 2.0, CIS Controls, and ISO/IEC 27001, and preferred security certifications

Qualifications

• Bachelor's degree required in information security, cybersecurity, IT, risk management, CS, or related field.
• Minimum 5 years in information security, IT risk management, cybersecurity or related, with at least 3 years in leadership.
• Security certifications (CISSP, CISM, CCSP) preferred but not required.

Responsibilities

• Develop and manage the Bank's Information Security Program and policies.
• Lead governance, risk management, regulatory compliance, incident response, and security awareness initiatives.
• Ensure compliance with FFIEC guidance, GLBA, PA Banking regulations, and ISO/IEC 27001.
• Oversee risk assessments and board reporting on cyber risk and security metrics.
• Lead Incident Response Program and coordinate breach notification and regulatory reporting.
• Monitor vendor security practices and conduct third-party risk assessments.
• Maintain security controls in alignment with NIST CSF 2.0 and CIS Controls.

Skills

Information security

Risk management

Regulatory compliance

Incident response

Leadership

Education

Bachelor's degree in information security or related field

Master's degree preferred

Job description

The Bank seeks an Information Security Officer to lead the development and execution of its information security program, governing risk, compliance, and incident response. You will present cyber risk metrics to executive management and the Board, and drive security awareness across the organization.

Ideal candidates have at least five years in information security with leadership experience, familiarity with NIST CSF 2.0, CIS Controls, and ISO/IEC 27001, and preferred security certifications