Director, Information Security – Hybrid, Enterprise Risk Leader

First Ent; California; Hybrid; USD 150,000 - 190,000; Full time

Job summary

First Entertainment Credit Union seeks a Director of Information Security to lead the organization’s security program, defining strategy and governance across risk, compliance, and operations. You will guide security architecture, cloud security, and incident response, while aligning with enterprise risk management and regulatory requirements.

The role is full-time with hybrid work in Hollywood, CA, reporting to the VP of Enterprise Risk Management.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Systems, or a related field; Master’s preferred.
• 10+ years in information security, cybersecurity, risk management, or IT governance, including 5+ years in leadership.
• Strong knowledge of cybersecurity frameworks and regulations (NIST CSF, NIST 800-53, FFIEC, GLBA, CIS Controls, ISO 27001).
• Professional certifications such as CISSP, CISM, CRISC, CISA, CGEIT, CCSP preferred but not required.

Responsibilities

• Develop and mature the enterprise Information Security Program, including strategy, governance, policies, standards, roadmaps, and annual planning.
• Provide GRC oversight and challenge IT risk assessments, control design, and remediation plans.
• Oversee security operations, monitoring, incident response, SOC coordination, and investigations.
• Oversee IAM requirements including least-privilege, privileged access management, and access certifications.
• Oversee vulnerability and threat management programs including testing, remediation, and patch management.
• Manage third-party security risk across the vendor lifecycle in collaboration with ERM, IT, and vendor management.
• Ensure compliance with cybersecurity laws and standards (NIST, FFIEC, GLBA, PCI DSS, CIS).
• Lead regulatory requests, evidence collection, remediation tracking, and audit readiness.
• Support cyber resilience through incident response planning, tabletop exercises, and recovery readiness.
• Promote enterprise security awareness, phishing simulations, and security-first culture.

Skills

Information security leadership

GRC oversight

Regulatory compliance

Risk management

Security operations

Vulnerability management

Threat intelligence

Vendor risk management

IAM / PAM

Education

Bachelor’s degree in Information Security or related field

Master’s degree preferred

Tools

SIEM (e.g., Splunk)

GRC platforms (e.g., RSA Archer)

Identity and access management tools

Vulnerability scanning tools

Job description

First Entertainment Credit Union seeks a Director of Information Security to lead the organization’s security program, defining strategy and governance across risk, compliance, and operations. You will guide security architecture, cloud security, and incident response, while aligning with enterprise risk management and regulatory requirements.

The role is full-time with hybrid work in Hollywood, CA, reporting to the VP of Enterprise Risk Management.