Information Security Governance Officer

Park-Community-Credit-Union; Louisville (KY); On-site; USD 132,000 - 136,000; Full time

Job summary

Park Community Credit Union is seeking an Information Security Governance Officer to lead the security program, assess risks, and report on security trends and program effectiveness. The role engages with governance committees and collaborates with IT and vendor management to ensure compliance and risk controls.

You will maintain security documentation, monitor regulatory expectations (NCUA, FFIEC, GLBA), and escalate material concerns.

Qualifications

• Five to seven years of progressively responsible experience in information security or related fields.
• Bachelor's degree or professional certifications in lieu of a degree.
• Strong understanding of cybersecurity frameworks and risk governance.

Responsibilities

• Lead the information security program, assess risks, and monitor controls.
• Develop and oversee information security policies and regulatory compliance.
• Oversee third-party risks, vendor due diligence, and SOC reports.
• Govern the incident response program and coordinate with IT for incidents and recovery.
• Maintain governance documentation and coordinate with audits and examinations.
• Perform other duties as assigned.

Skills

Security governance

IT risk management

Cybersecurity

Compliance

Education

Bachelor's degree

Certifications: CISM/CISSP/CISA

Job description

Role

By emphasizing ONE Park, ONE mission, ONE team, the Information Security Governance Officer serves as Park's designated Information Security Officer, reporting to the VP of Risk and providing independent oversight of information security and cybersecurity risks across the organization. This position leads the Credit Union's Information Security Program by establishing security requirements, assessing risks, evaluating controls, monitoring compliance, tracking remediation, and escalating material concerns. The role also oversees third-party information security risks, incident response governance, and regulatory compliance while collaborating with Information Technology. The officer regularly reports information security risks, trends, and program effectiveness to management and relevant governance committees.

Essential Functions & Responsibilities

• Lead the Credit Union's Information Security Program, including identifying, assessing, monitoring, and reporting cybersecurity and technology-related risks. Maintain security risk assessments, establish security requirements, evaluate mitigating controls, and provide independent challenge of Information Technology and other departments. Ensure material risks, exceptions, and deficiencies are documented, escalated, and aligned with the Credit Union's risk appetite.
• Develop, maintain, and oversee information security policies, standards, and requirements. Monitor emerging cybersecurity threats, industry practices, and applicable NCUA, FFIEC, GLBA, and other regulatory expectations. Assess organizational compliance, recommend program enhancements, and regularly report information security risks, trends, and material concerns to management and relevant governance committees.
• Oversee information security risks associated with third-party service providers and technology vendors. Collaborate with Vendor Management and Information Technology to establish security due diligence requirements, evaluate vendor security assessments and SOC reports, and review contractual security protections. Monitor identified vendor risks, track outstanding deficiencies, and elevate material concerns through established governance channels.
• Oversee the governance of the Credit Union's Incident Response Program, including incident response procedures, escalation protocols, regulatory notification considerations, and reporting requirements. Coordinate with Information Technology and other stakeholders to evaluate significant security incidents, monitor corrective actions, and oversee periodic incident response exercises. Provide governance oversight of information security considerations within business continuity and disaster recovery planning.
• Maintain information security governance documentation, including risk assessments, policies, exceptions, incident records, and remediation tracking. Coordinate information security matters for internal audits, external audits, and regulatory examinations, including responding to findings, monitoring corrective action plans, and reporting material deficiencies.
• Performs other duties as assigned.

Performance Measurements

1. To be an ambassador of Park's culture supporting the credit union's mission to build thriving communities together ensuring words and actions align with the Park VIBE that defines our Core Values: Vibrant Connections Inclusive Excellence Bold Compassion Endless Empowerment
2. To provide friendly, professional and accurate service and support to all members and coworkers.
3. To provide independent oversight of the Credit Union's Information Security Program by identifying, assessing, monitoring, and reporting information security risks, evaluating compliance with established security requirements, and ensuring material deficiencies and exceptions are appropriately documented, tracked, and escalated.
4. To maintain documentation as required for tracking and audit review.
5. To oversee information security risks associated with third-party service providers and incident response preparedness, ensuring appropriate due diligence, risk assessments, incident response procedures, and corrective action monitoring are maintained in accordance with the Credit Union's established security standards.
6. To maintain a professional work environment, promote teamwork, build respect among coworkers and present a businesslike appearance.
7. To follow all security policies and procedures and report discrepancies or suspicious activity to manager immediately.

Knowledge and Skills

Experience Five to seven years of progressively responsible experience in information security, cybersecurity, information technology risk management, security governance, or a closely related field.

Education (1) A bachelor's degree; or (2) industry-recognized professional certifications, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Information Systems Auditor (CISA), in lieu of a degree.

Interpersonal Skills Work involves much personal contact with others inside and/or outside the organization for the purpose of first-level conflict resolution, building relationships, and soliciting cooperation. Discussions involve a higher degree of confidentiality and discretion, requiring diplomacy and tact in communication.

Other Skills 1. Knowledge of office equipment, word processing, spreadsheet, e-mail, personal computers, PC operating systems, etc. 2. Must be able to work and travel independently and use general office equipment. 3. Knowledge of cybersecurity technologies and security controls, including anti-malware, MDR/XDR, firewalls, and other security solutions, with the ability to assess associated risks and control effectiveness. 4. Understanding of network security principles, IT infrastructure, and cybersecurity frameworks sufficient to evaluate information security risks and provide independent oversight.

Physical Requirements

PHYSICAL DEMANDS The physical demands described here are representative of those required to successfully perform the essential functions of this position, but do not necessarily constitute an exhaustive list of all essential functions. To the extent required by any applicable law, reasonable accommodations will be made to enable qualified individuals with disabilities to perform essential functions where this can be done without posing a direct threat to self or others. While performing the essential duties of this position, the employee frequently must sit, stand, and walk short distances. The employee frequently uses hands and fingers to count currency and handle, manipulate, and feel objects, documents, and office tools and equipment. Reads, writes, listens, speaks, and uses personal computers, copiers, telephones, and other office equipment and software throughout the work day. The employee is occasionally required to stoop, bend, squat, and reach overhead with hands and arms. Occasionally pushing and pulling of office furniture and other objects. The employee may occasionally lift and/or move up to 15 pounds and on occasion lift and/or move up to 25 pounds.

Park Community Credit Union is an Equal Opportunity Employer/ Veterans/ Disabled

Pay Range:$131,556.01 - $135,624.75 per year