Information Security Governance Lead

Park Community Credit Union; Louisville (KY); On-site; USD 132,000 - 136,000; Full time

Job summary

Park Community Credit Union seeks an Information Security Governance Officer to lead the organization’s information security program, establish security requirements, assess risks, and monitor controls. The role provides independent challenge to IT and other departments and reports to risk leadership.

Responsibilities include policy development, regulatory alignment, vendor security oversight, incident governance, and audit coordination to maintain program effectiveness and risk visibility.

Qualifications

• 5–7 years of progressively responsible information security experience.
• Bachelor's degree or professional security certifications in lieu of a degree.
• Knowledge of cybersecurity technologies and security controls.
• Understanding of network security principles and IT infrastructure.
• Ability to provide independent oversight and governance.

Responsibilities

• Lead the information security program with risk assessments and controls.
• Develop and oversee security policies, standards, and regulatory mappings.
• Manage vendor due diligence and third‑party risk assessments.
• Oversee incident response governance and business continuity considerations.
• Coordinate audits and respond to regulatory findings.
• Escalate material risks and maintain governance documentation.

Skills

Security governance

Risk management

Independent oversight

Communication

Education

Bachelor's degree or professional security certifications (CISM/CISSP/CISA)

Tools

Anti-malware

MDR/XDR

Firewalls

SOC reports

Job description

Park Community Credit Union seeks an Information Security Governance Officer to lead the organization’s information security program, establish security requirements, assess risks, and monitor controls. The role provides independent challenge to IT and other departments and reports to risk leadership.

Responsibilities include policy development, regulatory alignment, vendor security oversight, incident governance, and audit coordination to maintain program effectiveness and risk visibility.