Head of Information Security & Privacy

German American Bank; Evansville (IN); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

PTO 25 days

Holidays and bereavement leave

Education assistance

Parental leave

Wellness benefits

401(k) match

Stock purchase plan

Job summary

German American Bank is seeking an Information Security Officer to lead the bank's information security program and oversee physical security teams, aligning IT security with regulatory requirements.

You will partner with Technology Services to coordinate security initiatives, manage incident response, risk reporting, training, and awareness while guiding a security team with 5–10 years of experience and strong leadership.

Qualifications

• Bachelor's degree in information/cybersecurity or related field.
• Regulatory knowledge including FFIEC, FDIC, PCI, GLBA, NIST.
• 5–10 years information and physical security experience.

Responsibilities

• Develop and maintain the information security program.
• Coordinate disaster recovery and business continuity planning.
• Lead risk reporting and enterprise risk management activities.
• Maintain privacy compliance with GLBA, HIPAA, PCI.
• Oversee threat monitoring and daily security operations.
• Manage third‑party risk and user access provisioning.
• Lead security and physical security teams; recruit and manage staff.
• Collaborate with Technology Services on security initiatives.
• Address audit and examination requests and findings.
• Oversee security training and awareness programs.

Skills

Information security

Risk management

Incident response

Regulatory compliance

Team leadership

Audits

Vendor risk

Disaster recovery

Education

Bachelor's degree in Information/Cybersecurity

Certifications (CISSP/CISM/CISA)

Tools

SIEM

Firewall management

Vulnerability scanning

Cloud security tools

Job description

German American Bank is seeking an Information Security Officer to lead the bank's information security program and oversee physical security teams, aligning IT security with regulatory requirements.

You will partner with Technology Services to coordinate security initiatives, manage incident response, risk reporting, training, and awareness while guiding a security team with 5–10 years of experience and strong leadership.