Information Security Officer

Northwest Community Bank; Canton (CT); On-site; USD 88,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Prescription Drug Coverage

Vision Insurance

AFLAC supplemental coverage

HSA with employer contribution

FSA

Job summary

Northwest Community Bank is seeking an Information Security Officer in Canton, CT. You will lead the bank’s information security and vendor risk programs, overseeing strategy, policy, governance, and regulatory alignment while coordinating audits and communications with executives and the Board.

The role requires expertise in security controls, risk management, and compliance, with strong collaboration across IT, risk, and business units.

Qualifications

• Bachelor’s degree in Computer Science, MIS, Cybersecurity, or related field; equivalent information security experience may be considered.
• At least five years of risk management experience across networking, hardware, software, information security, and vendor risks.
• CISSP, CISA, CISM, or comparable certification preferred.
• Familiarity with endpoint security solutions, vulnerability management tools, and security monitoring technologies.
• Basic understanding of information technology auditing procedures is required.

Responsibilities

• Develop, implement, monitor, and improve Information Security and Vendor Management Programs, including policies, procedures, standards, guidelines, and templates.
• Conduct IT, cybersecurity, and vendor risk assessments; review technology risks; perform business impact analyses.
• Identify and evaluate information and cybersecurity threats using FFIEC CAT and RSAT; benchmark against NIST frameworks.
• Manage user entitlement reviews, network-use monitoring, outsourced penetration testing, vulnerability remediation, and Data Life Cycle program.
• Develop dashboards and reports to show program performance; present results to IT Steering, Ops/Tech, Compliance Committees, Senior Management, and Board.
• Promote security awareness through onboarding, phishing follow-up, and education for employees, customers, and Board.
• Support audits and regulatory examinations by coordinating documentation and tracking remediation of findings.
• Monitor state and federal requirements, including CT Data Privacy Act and GLBA; propose updates based on changes.

Skills

Information security knowledge

Cybersecurity

Technology risk management

Networking

Hardware & software

Data protection

Communication skills

Education

Bachelor’s degree in CS/IS/Cybersecurity

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Security Officer

Canton, CT, US

Salary Range: $87,590.98 To $169,926.48 Annually

Information Security Officer

Information Security | Banking

Reports to: Chief Risk Officer (CRO)

Summary of the Role

The Information Security Officer leads the development, implementation, and ongoing oversight of the Bank’s Information Security and Vendor Management Programs. Reporting to the Chief Risk Officer, this role safeguards systems and non-public information by identifying and addressing security risks, maintaining regulatory alignment, coordinating technology-related audits and examinations, and keeping Senior Management and the Board of Directors informed. The Officer also promotes organization-wide security awareness and works closely with Information Technology, business leaders, auditors, regulators, vendors, customers, and other external partners.

Key Responsibilities

• Develop, implement, monitor, and continuously improve the Bank’s Information Security and Vendor Management Programs, including related policies, procedures, standards, guidelines, and templates.
• Conduct information technology, cybersecurity, and vendor risk assessments; review technology risks identified by business lines; and perform business impact analyses in alignment with the Business Continuity Plan and Vendor Risk Management Program.
• Identify and evaluate information and cybersecurity threats using recognized assessment methods, including FFIEC CAT and RSAT, and evaluate the security program against established frameworks such as NIST.
• Manage and oversee user entitlement reviews, network-use monitoring, outsourced penetration testing, vulnerability remediation, and the Bank’s Data Life Cycle program through secure destruction of non-public data.
• Develop dashboards and reports that demonstrate program performance, and present assessment results and program status to IT Steering, Operations/Technology, and Compliance Committees, Senior Management, and the Board of Directors.
• Promote a culture of information security through onboarding, awareness communications, phishing-campaign follow-up, and education for employees, customers, and the Board, as appropriate.
• Serve as the focal point for technology-related audits and regulatory examinations by supporting planning, coordinating requested documentation, recording responses, and tracking remediation of findings.
• Monitor applicable state and federal requirements, including the Connecticut Data Privacy Act and GLBA, and recommend updates based on regulatory changes and industry best practices.

Skills

• Strong knowledge of information security, cybersecurity, technology risk management, networking, hardware, software, and data-protection practices.
• Working knowledge of technology auditing procedures, regulatory examination support, vendor risk management, business continuity, and recognized security frameworks.
• Ability to analyze complex technical and business issues, exercise sound judgment, anticipate emerging risks, and recommend practical solutions.
• Excellent written and verbal communication skills, with the ability to explain security concepts clearly to audiences at all levels and to external stakeholders.
• Strong policy development, program management, reporting, presentation, collaboration, and organizational skills.
• Proficiency with Microsoft Office applications.
• Ability to handle confidential organizational information and sensitive non-public personal information with discretion.

Qualifications

• Bachelor’s degree in Computer Science, Management Information Systems, Cybersecurity, or a related field; equivalent applicable information security experience may be considered.
• At least five years of risk management experience, including experience assessing networking, hardware, software, information security, and vendor risks.
• CISSP, CISA, CISM, or a comparable certification is preferred.
• Familiarity with endpoint security solutions, vulnerability management tools, and security monitoring technologies.
• Basic understanding of information technology auditing procedures is required.
• Regular attendance and on-call availability are essential functions of the position.

Why Join Us

Join a collaborative banking organization where information security is integral to protecting customers, supporting business continuity, and maintaining trust. This role offers broad organizational visibility, meaningful partnership with senior leaders and the Board of Directors, and the opportunity to shape programs that strengthen the Bank’s security and risk-management posture.

Work Environment & Physical Requirements

• Primarily office-based role requiring prolonged sitting and computer use.
• Regular use of standard office equipment.
• Occasional standing, walking, reaching, stooping, or kneeling.
• Occasional light lifting and moving of items weighing up to 20 pounds.Extended periods of computer screen use requiring close vision, visual focus, and the ability to adjust focus.
• Ability to travel by car and provide on-call availability.

Equal Opportunity Employer

We are committed to creating an inclusive and diverse workplace. Employment decisions are based on qualifications, merit, and business needs, without regard to race, color, religion, sex, national origin, veteran status, or any other protected status.

Employee Benefits Snapshot

• Medical Insurance
• Prescription Drug Coverage
• Vision Insurance
• AFLAC supplemental coverage
• Health Savings Account (HSA) with employer contribution
• Flexible Spending Accounts (Medical & Dependent Care)

Paid Time Off (PTO)

Full-Time and Benefit Eligible Employees receive a variety of paid time off benefits (prorated based on hire date), including:

• Vacation Time
• Personal Time
• Sick Time
• Birthday Day Off
• Floating Holiday
• Short-Term Disability

Part-Time Employees (20-30 hours) receive:

• Vacation Time
• Personal Time
• Company-Paid Life Insurance
• Company-Paid AD&D Insurance
• Employee Assistance Program (EAP) for counseling, financial, legal, and family support

Retirement

• 401(k) Plan
• 4% automatic company contribution
• 50% match on the first 8% you contribute
• Potential annual profit-sharing contribution

Additional Resources

• Virtual Medical Visits
• Wellness Programs
• Behavioral Health Support
• Wellness Rewards Program

Medical benefits are available to eligible full-time employees and generally become effective on the first day of the month following 60 days of employment. Paid Time off becomes effective on the first day of month following 90 days of employment.

This summary provides an overview of available benefits. Refer to official plan documents and company policies for complete details and eligibility requirements.