Information Security Officer

Jobtailor; Colorado; On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking an Information Security leader to guide risk-aware decisions across the line of business. The role emphasizes application security, cloud deployments, and compliance oversight, partnering with senior stakeholders to shape security strategy.

The ideal candidate will have 5+ years in information security, strong Azure/AWS/GCP experience, and proven communication skills to influence executives and teams.

Qualifications

• 2-5 years of experience in technology and 5+ years in information security.
• 2-5 years of experience in application development or application security.
• Experience with cloud implementations in Azure, AWS and GCP.
• Subject matter expert in application security, vulnerability testing, system testing, and/or Agile lifecycle management.
• Strong LOB knowledge for the business domain (e.g. CSBB/GBM).
• 1-2 years in risk management or participation in risk processes.
• Excellent presentation and communication skills.

Responsibilities

• Support a group in developing business insight for focused information security discussions.
• Provide guidance on information security topics, policies and controls.
• Contribute to ongoing information security initiatives and improvements for the LOB.
• Serve as an Information Security subject matter expert for the LOB.
• Advise LOB management on risk issues related to information security and recommended actions.
• Monitor information security trends and inform LOB/CIO Partners about issues.
• Drive GIS/LOB risk deliverables.
• Collaborate with risk partners on info security priorities.
• Participate in senior LOB risk management and business continuity routines.
• Identify and measure GIS controls on critical business processes or channels.

Skills

Information security

Cloud security

Risk management

Application security

Communication skills

Education

Bachelor's or Master’s in Computer Science or Information Technology

Job description

Responsibilities

• Support a group/team in developing business insight for focused information security risk discussions
• Provide guidance on information security topics, policies and controls
• Contribute to the ongoing information security initiatives and improvements development, implementation and maintenance of information security for the line of business (LOB)
• Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for the line of business (LOB)
• Provides guidance and advocacy regarding the prioritization of LOB investments that impact information security
• Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs
• Monitors information security trends internal and external to the bank and keeps LOB/CIO Partners informed about information security-related issues
• Drives GIS/LOB risk deliverables
• Collaborates with risk partners on info security critical priorities
• Participates in senior LOB specific Risk Management & Business Continuity Routines
• Identifies and measures global information security (GIS) controls on most critical business processes or channels

Requirements

• 2-5 years of experience in technology and 5+ years in information security
• 2-5 years of experience in application development or application security
• Experience working on cloud implementations in Microsoft Azure, Amazon Web Services and Google Cloud Platform environments
• Must display subject matter experience in application security, vulnerability testing, system testing, and/or Agile lifecycle management
• Strong LOB knowledge/experience for the type of business they are aligned to (e.g. CSBB/GBM)
• 1-2 years of risk management experience or direct participation in risk management processes, including application risk classification and application control assessments.
• Experience giving presentations and superb communication skills
• Bachelor's and/or Master’s degree in Computer Science, Information Technology or related field

Core Competencies

Demonstrates expertise in information security, application security, and risk management, with a strong focus on cloud implementations and compliance. Capable of providing strategic guidance and insights to enhance information security initiatives within the line of business.