Director of Security Risk & Governance (2LOD)

Cornerstone Capital Bank; Houston (TX); Presencial; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

Cornerstone Capital Bancorp, Inc. in Houston seeks a Director, Integrated Security to act as the Bank's second line of defense for security risk. You will provide independent oversight of information security, IT, privacy, and corporate security risks.

You will set risk framework and policy standards, challenge first-line programs, report to the Board, and drive incident response, business continuity, and security culture across the organization.

Responsabilidades

• Establish and maintain the enterprise security risk management framework, including risk appetite statements, policies, minimum control standards, and risk taxonomies.
• Review and challenge first-line policies, standards, and procedures to confirm alignment with regulatory expectations and risk appetite.
• Perform independent assessments of first-line identification, measurement, and management of security risks, including RCSAs and KRIs.
• Provide credible challenge to risk treatment decisions, escalation paths, and governance to the Board.
• Monitor first-line compliance with GLBA, FFIEC IT Handbook, NYDFS Part 500, and SEC cyber rules; track MRAs.
• Partner with the Chief Privacy Officer to oversee GLBA privacy provisions and consumer data protection.
• Establish minimum standards for incident response, business continuity, and cyber recovery programs; oversee testing and remediation.
• Advise and report on material security incidents; conduct post-incident reviews for management and the Board.
• Set enterprise expectations for security awareness training and measure program effectiveness.
• Coordinate security risk governance with 3LOD, ensuring independence of the challenge function.
• Independently test and validate the design and operating effectiveness of key security controls.
• Develop and maintain business continuity governance, BIA, and continuity testing programs.
• Engage with tech and business leaders on strategic initiatives to align risk with business goals.
• Produce independent reporting on security posture, KRIs, and threats for executive leadership and the Board.

Descripción del empleo

Cornerstone Capital Bancorp, Inc. in Houston seeks a Director, Integrated Security to act as the Bank's second line of defense for security risk. You will provide independent oversight of information security, IT, privacy, and corporate security risks.

You will set risk framework and policy standards, challenge first-line programs, report to the Board, and drive incident response, business continuity, and security culture across the organization.