Information Security Manger

Bank of the Sierra; California, Northern (MO, KY); Hybrid; USD 80,000 - 100,000; Full time

Job summary

Bank of the Sierra is seeking a VP Information Security Manager to lead the physical security and business continuity programs while providing independent oversight of IT security controls. The role collaborates with IT, Operations, Risk Management, and senior leadership to align with regulatory expectations and industry best practices.

The position requires seven years in financial institution operations and information/cyber security, with deep knowledge of security frameworks and risk

Qualifications

• Bachelor's degree from an accredited college or university and a minimum of seven years of experience in financial institution operations and information/cyber security; or an equivalent combination of education and experience.
• Strong understanding of security frameworks and regulatory expectations (e.g., CRI, NIST CSF, FFIEC, GLBA, CCPA, PCI DSS).
• Advanced knowledge of bank operations, systems, products, and services.

Responsibilities

• Coordinate with leadership to ensure an effective physical security program at all locations.
• Develop and maintain a robust business continuity program including risk assessments and testing.
• Review and update information security policies and regulatory mappings to ensure alignment with risk appetite.
• Assist with audits and regulatory examinations; coordinate responses and remediation of deficiencies.
• Provide second-line input on third-party information security risk management and vendor due diligence.
• Prepare information security and physical security reports for Management and Board committees.

Skills

Security frameworks

Regulatory expectations

Banking information security

Analytical/problem-solving

Communication skills

Education

Bachelor's degree

Tools

Microsoft Office

Job description

VP Information Security Manager - Remote

Job Category: Compliance

Requisition Number: INFOR002501

• Posted : July 1, 2026
• Full-Time

Locations

Showing 1 location

All Markets

California, USA

Description

JOB SUMMARY:

The Information Security Manager supports the Senior Information Security Officer and works with enterprise stakeholders, such as IT, Operations, and Enterprise Risk Management, to provide independent oversight of the organization's IT security controls, ensuring information security risks are identified, measured, monitored, and reported in alignment with regulatory expectations, internal risk appetite, and industry best practices. The Information Security Manager will have primary responsibility for managing the Bank's physical security and business continuity programs.

RESPONSIBILITIES INCLUDE, BUT ARE NOT LIMITED TO:

• Coordinate with the Director of Community Banking, branch leadership, IT, and Facilities to ensure the Bank maintains an effective physical security program at all locations.
• Work with business leaders to develop and maintain a robust business continuity program, including business impact analysis, risk assessment, continuity and recovery strategies, training and communication, and testing.
• Perform annual updates to the R-SAT and CRI profile. Conduct and/or review information security and IT risk assessments, including inherent risk, control effectiveness, and residual risk determinations.
• Evaluate the design and operating effectiveness of information and physical security and controls through appropriate monitoring and testing. Partner with stakeholders to identify root cause and appropriately mitigate any identified gaps.
• Review and maintain review of information and physical security policies, standards, and guidelines to ensure alignment with regulatory requirements and risk appetite.
• Assists with audits and regulatory examinations, including coordinating responses, providing required documentation, and ensuring identified deficiencies are remediated.
• Provide second-line input of third-party information security risk management, including review of vendor risk assessments, due diligence results, and cyber risk remediation.
• Provide advisory oversight for cybersecurity incidents by reviewing root cause analysis, corrective action plans, incident trends, and systemic control weaknesses, and validating that lessons learned are incorporated into risk assessments, controls, and policies.
• Creates or assists with the preparation of information security and physical reports for Management and Board/Board Committees.
• Participates in IT, Security, Deposit, AI, and Lending Working Groups.
• Works with business partners to ensure appropriate information and cybersecurity risks are considered with new products, services, delivery channels, and technology initiatives.
• Creates or assists with the preparation of information and physical security communications and training materials.
• Coordinate with internal stakeholders and subject matter experts, third-party vendors, and external legal counsel, as needed, to identify, report, track, and remediate issues and incidents.
• Acts as a subject matter resource on information and physical security regulatory expectations and industry best practices.
• Monitor for and communicate risks and potential risk mitigation strategies to address emerging threats.
• Ensures consistent application of information and physical security policies, procedures, and regulatory requirements.
• Performs other duties as assigned.

EDUCATION AND/OR EXPERIENCE:

Bachelor's degree from an accredited college or university and a minimum of seven years of experience in financial institution operations and information/cyber security; or an equivalent combination of education and experience.

REQUIRED KNOWLEDGE, SKILL, AND ABILITY:

• Strong understanding of security frameworks and regulatory expectations (e.g., CRI, NIST CSF, FFIEC, GLBA, CCPA, PCI DSS).
• Demonstrated ability to assess control design and operating effectiveness.
• Advanced technical and banking information security knowledge.
• Advanced knowledge of bank operations, systems, products, and services.
• Strong analytical and problem-solving skills.
• Detail-oriented, with the ability to manage multiple tasks and prioritize work in a fast-paced environment.
• Ability to work independently while performing duties, with excellent organizational and time management skills.
• Advanced personal computer skills, including proficiency in Microsoft Office products.
• Excellent verbal, written, and interpersonal communication skills.
• Exercises awareness with regard to possible suspicious activity, money laundering, or fraudulent behavior.

PHYSICAL DEMANDS:

The physical demands described herein are representative of those that an employee must meet to perform the essential functions of this job successfully. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. While performing the duties of this job, the employee is regularly required to sit. The employee is frequently required to talk or hear. The employee is occasionally required to stand, walk, and reach with hands and arms. The employee must occasionally lift and/or move up to ten pounds. Specific vision abilities this job requires include close vision and the ability to adjust focus.

WORK ENVIRONMENT:

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, scanners, filing cabinets, and fax machines. The noise level in the work environment is usually moderate. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

Bank of the Sierra is proud to be an equal opportunity workplace and is an affirmative action employer committed to equal employment opportunities regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

Salary Range: $80,000 - $100,000

Qualifications

Education

Required

Bachelors or better.

Experience

Required

7 years:

A minimum of seven years of experience in financial institution operations and information/cyber security; or an equivalent combination of education and experience.

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.