Director of Information Security & Risk Management

BluPeak Credit Union; San Diego (CA); Presencial; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

BluPeak Credit Union seeks a Director of Information Security to lead enterprise information security, policy, and program development. This role protects member data and BluPeak’s technology stack across on‑prem and cloud services, drives risk oversight, and partners with executives to align security with business strategy.

The position reports to the Risk Management team, oversees policy, risk assessments, and security training, and collaborates with IT and business units to embed security

Formación

• Bachelor’s degree in information technology, cybersecurity or related field required.
• Minimum of three (3) years of information security experience; or an Associate degree with five (5) years of experience; or seven (7) years of relevant work experience in lieu of a degree.
• Financial, medical, DOD or other highly regulated experience required.

Responsabilidades

• Lead cybersecurity strategy, governance and leadership aligned with business goals and risk management frameworks.
• Maintain robust security posture against emerging threats and administer security policy and program.
• Oversee third-party risk management, due diligence, SOC 1 and SOC 2 evaluations, and vendor risk requirements.
• Perform identity and access governance, data classification, cloud security and project security reviews.
• Liaise with regulators, examiners and external auditors regarding information security.
• Manage security policy exceptions and support security training and awareness.

Conocimientos

Network security

Incident response

Auditing/regulatory

GRC frameworks

Third party risk

IAM/Cloud/SIEM

Educación

Bachelor’s degree in IT/cybersecurity

Associate degree + 5+ years

7+ years experience without degree

Herramientas

SIEM/logging

Cloud security

IAM

CISSP/CISA/CISM/GIAC/CRISC

Descripción del empleo

BluPeak Credit Union seeks a Director of Information Security to lead enterprise information security, policy, and program development. This role protects member data and BluPeak’s technology stack across on‑prem and cloud services, drives risk oversight, and partners with executives to align security with business strategy.

The position reports to the Risk Management team, oversees policy, risk assessments, and security training, and collaborates with IT and business units to embed security