Director of Integrated Security & Risk

Cornerstone Capital; Houston, Northern (TX, KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Full benefits package

Bonus potential

Job summary

Cornerstone Capital Bancorp, Inc. in Houston, TX, seeks a Director, Integrated Security to build and sustain a comprehensive information security program protecting data and systems.

The role oversees governance, IT risk, and corporate security programs in alignment with regulatory expectations. The position requires leading risk assessments, incident response planning, and governance reporting to the Board.

Qualifications

• 10+ years of information security, technology risk, or operational risk management in financial services.
• Minimum 5 years in a second line of defense, risk oversight, or audit capacity.
• Bachelor’s degree preferred.
• Expert knowledge of FFIEC IT Handbook, NIST CSF, GLBA, NYDFS Part 500, and related regulations.

Responsibilities

• Establish and maintain the enterprise security risk management framework, including risk appetite, policies, and minimum control standards.
• Perform independent assessments of first-line risk identification, measurement, and management; provide credible challenge on risk treatment decisions.
• Monitor and independently assess compliance with applicable laws, regulations and supervisory expectations; report remediation.
• Establish enterprise security awareness and training programs; monitor effectiveness and drive improvements.
• Set control objectives and standards for security architecture and tooling; review technology selections and deployments for risk alignment.
• Coordinate with three lines of defense to ensure independence of the second-line challenge function; engage with leadership on emerging risks.

Skills

Information security

Technology risk

Operational risk

Risk governance

Regulatory knowledge

Audit coordination

Education

Bachelor's degree

Tools

Microsoft Office

Job description

Cornerstone Capital Bancorp, Inc. in Houston, TX, seeks a Director, Integrated Security to build and sustain a comprehensive information security program protecting data and systems.

The role oversees governance, IT risk, and corporate security programs in alignment with regulatory expectations. The position requires leading risk assessments, incident response planning, and governance reporting to the Board.