INFORMATION SECURITY MANAGER

CBB Bank; Los Angeles (CA); On-site; USD 115,000 - 117,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

401k retirement savings plan

Paid federal holidays

Job summary

CBB Bank in Los Angeles, CA is seeking an Information Security Manager to develop and maintain the bank's information security strategy, ensuring protection of data and infrastructure. The role leads risk management, regulatory alignment, and security program governance across the organization.

The position includes disaster recovery, incident response, and ongoing improvement of security technologies and procedures.

Qualifications

• Bachelor’s degree or equivalent in computer science, information technology, cybersecurity, or related field.
• Minimum 5 years of progressive cybersecurity leadership in regulated industries (financial services preferred).
• Certifications (CISSP/CISM/CISA) are highly preferred.
• Ability to align cybersecurity with business objectives and regulatory expectations.

Responsibilities

• Develop, implement, and enhance the Bank’s information security strategy, architecture, and roadmap.
• Establish enterprise-wide security policies, standards, and controls.
• Monitor threats and adapt security measures to evolving risks.
• Lead risk management across the organization and oversee disaster recovery and cyber resilience.
• Direct incident response, investigations, containment, and remediation.
• Oversee security assessments, audits, and regulatory compliance efforts.

Skills

NIST framework

ISO 27001

Leadership

Risk management

Education

Bachelor’s degree in CS/IT/Cybersecurity

CISSP/CISM/CISA preferred

Tools

SIEM

DLP

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

INFORMATION SECURITY MANAGER

Full Time Los Angeles, CA, US

8 days ago Requisition ID: 1096

Salary Range: $115,000.00 To $117,000.00 Annually

POSITION OVERVIEW The Information Security Manager is responsible for developing and maintaining the Bank’s information security strategy, vision, and programs. This role helps protect the Bank’s information assets and technology infrastructure from internal and external threats. The position leads initiatives to support regulatory compliance, industry standards, and security best practices while promoting a strong culture of security awareness across the organization. The incumbent also supports effective risk management and helps safeguard the Bank’s data and intellectual property.

POSITION RESPONSIBILITIES

• Develop, implement, and continuously enhance the Bank’s Information Security Strategy, Architecture, and Roadmap to align with business objectives, risk appetite, and regulatory requirements.
• Establish and maintain enterprise-wide information security policies, standards, procedures, and controls consistent with industry best practices and applicable regulations.
• Monitor emerging cybersecurity threats, vulnerabilities, and industry trends, adapting security strategies and controls to address evolving risks.
• Identify, assess, prioritize, and oversee the mitigation of information security risks across the organization through a comprehensive risk management framework.
• Lead the Bank’s information technology disaster recovery, and cyber resilience programs, including planning, testing, coordination, and ongoing improvement activities.
• Oversee the design, implementation, operation, and continuous improvement of security technologies, processes, and controls to safeguard the confidentiality, integrity, and availability of Bank information assets.
• Direct cybersecurity incident response, investigation, containment, recovery, and post-incident remediation activities to minimize business impact and strengthen security posture.
• Conduct and oversee security assessments, control reviews, audits, and testing activities to evaluate effectiveness and ensure ongoing compliance.
• Ensure compliance with applicable laws, regulations, industry standards, and regulatory guidance, including but not limited to GLBA, FFIEC, ISO 27001, and other relevant requirements.
• Establish and maintain effective information security governance, reporting, and oversight structures to support enterprise risk management and strategic decision-making.
• Serve as the primary liaison with internal and external auditors, regulators, and independent assessors, providing subject matter expertise, guidance, and oversight on security-related reviews, investigations, and assessments.
• Develop, implement, and promote enterprise-wide security awareness and training programs to foster a strong culture of cybersecurity and accountability.
• Provide leadership, guidance, and specialized security training to Information Technology personnel and other stakeholders on cybersecurity best practices and regulatory expectations.
• Perform other duties and responsibilities as assigned by the Chief Information Officer and Executive Management.

SKILLS / QUALIFICATIONS

• Strong knowledge of cybersecurity principles, frameworks, and technologies, including NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, cloud security, and other industry-standard security practices.
• Exceptional leadership, communication, and interpersonal skills, with a demonstrated ability to collaborate across business and technology functions and influence stakeholders at all organizational levels.
• Strong analytical, critical thinking, and problem-solving capabilities, with the ability to assess complex risks and make sound, risk-based decisions in a dynamic and fast-paced environment.
• Proven ability to lead, mentor, and develop high-performing cybersecurity teams while fostering a culture of accountability, continuous improvement, and operational excellence.

EDUCATION / PROFESSIONAL QUALIFICATION

• Bachelor’s degree from an accredited university in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of seven (5) years of progressive leadership experience in cybersecurity, with a demonstrated track record of successfully developing, implementing, and managing enterprise cybersecurity programs.
• Experience within regulated industries such as financial services with a strong understanding of applicable regulatory and compliance requirements.
• Professional cybersecurity certifications, including CISSP, CISM, CISA, or equivalent credentials, are highly preferred.
• Proven ability to align cybersecurity strategies with business objectives, regulatory expectations, and organizational risk management practices.

We offer a competitive total rewards package, including but not limited to Medical, Dental, Vision, and Life Insurance, 401k retirement savings plan, and paid federal holidays, for this full-time position within the annual salary range of $115,000 - $117,000.

• Medical Insurance
• Dental Insurance
• Vision Insurance
• Life Insurance
• 401k retirement savings plan
• Paid federal holidays

Annual pay ranges are determined based on qualifications, level, and location. Exact compensation may vary based on your skills and experience.

Must be authorized to work in the US.

We are an Equal Opportunity Employer. All applicants will receive consideration for employment without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity, gender expression, genetic information, or military or Veteran status, or any other characteristic protected by law.