Information Security Officer

German American Bank; Evansville (IN); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

PTO 25 days

Holidays and bereavement leave

Education assistance

Parental leave

Wellness benefits

401(k) match

Stock purchase plan

Job summary

German American Bank is seeking an Information Security Officer to lead the bank's information security program and oversee physical security teams, aligning IT security with regulatory requirements.

You will partner with Technology Services to coordinate security initiatives, manage incident response, risk reporting, training, and awareness while guiding a security team with 5–10 years of experience and strong leadership.

Qualifications

• Bachelor's degree in information/cybersecurity or related field.
• Regulatory knowledge including FFIEC, FDIC, PCI, GLBA, NIST.
• 5–10 years information and physical security experience.

Responsibilities

• Develop and maintain the information security program.
• Coordinate disaster recovery and business continuity planning.
• Lead risk reporting and enterprise risk management activities.
• Maintain privacy compliance with GLBA, HIPAA, PCI.
• Oversee threat monitoring and daily security operations.
• Manage third‑party risk and user access provisioning.
• Lead security and physical security teams; recruit and manage staff.
• Collaborate with Technology Services on security initiatives.
• Address audit and examination requests and findings.
• Oversee security training and awareness programs.

Skills

Information security

Risk management

Incident response

Regulatory compliance

Team leadership

Audits

Vendor risk

Disaster recovery

Education

Bachelor's degree in Information/Cybersecurity

Certifications (CISSP/CISM/CISA)

Tools

SIEM

Firewall management

Vulnerability scanning

Cloud security tools

Job description

TheInformation Security Officer (ISO)at German American Bank is responsible for establishing and coordinating information security efforts, privacy efforts and business resumption planning across the company. The role is positioned as a key partner to the Technology Services department – ensuring security and IT activities are completed in a coordinated, prioritized and timely manner. The ISO carries direct leadership responsibility for both the information security and physical security team(s). This role is responsible for ensuring the bank’s information security strategy is optimal and includes the appropriate controls for mitigating identified threats and risks. This includes research, development, planning, implementation, communication and enforcement of IT security design, policies, procedures, solutions and standards.

What You’ll Do:

• Information Security Program:Develop and maintain the company's information security program, ensuring compliance with all regulatory guidance and information security best practices. This includes policies and procedures aligned with the bank’s information security program as well as ownership of the information security risk assessment for the bank.
• Business Continuity & Disaster Recovery:Maintain, coordinate, and support the bank's enterprise-wide disaster recovery and business continuity plan, including periodic testing. Key contributor and leader in any Incident Response Team issue, including documentation of any information security related incident.
• Enterprise Risk Management reporting –establish and monitor KRIs related to information security to align with the bank’s ERM framework and risk appetite. Participate and contribute reports, projects and findings at management’s Tech Risk Committee quarterly, and present the annual Information Security Program at Board Risk Committee annually.
• Privacy Program:Maintain compliance with applicable privacy laws including GLBA, HIPAA, PCI, etc.
• Threat Monitoring:Proactively monitor, evaluate, and implement best practicesrelated to enterprise information security. Provide internal guidance on emergingthreats.
• Daily Security Operations:Ensure completion of daily reviews of security logs and reports; ensure appropriate follow-up action is taken.
• Third-Party Risk:Evaluate effectiveness of information security programs of third-party software, hardware, and service providers.
• User Access Management:Oversee user access provisioning for all company systems.
• Team Leadership:Lead the Information Security and Physical Security Team(s), including recruiting, hiring, training, and performance management.
• IT Partnership:Work closely and collaborate with the Technology Services department to protect information assets through appropriate tools. Coordinate project timelines, resources and outcomes for any new information security initiatives with Technology Services.
• Audit & Examination Response:Respond to relevant audit and examination requests, manage resolutions of any findings.
• Training & Awareness:Oversee the bank’s information security training and awareness efforts, ensuring employees receive timely, role-based education on security practices and emerging threats.

What it Takes:

• To be successful as the Information Security Officer, you’ll need:
• 5-10 years information and physical security experience.
• 2-3 years leadership/managerial experience.
• Bachelor's Degree in Information/Cybersecurity, Computer Information Systems, Computer Science, Information Technology Management, Network Management Systems, or related work experience.
• Knowledge and experience with regulatory bodies including FFIEC, FDIC and banking regulations such as, but not limited to PCI, GLBA, NIST and Cybersecurity.
• Certifications in or willing to obtain certification in CISSP, CISM, or CISA or equivalent recognized industry certifications.
• Ability to: communicate effectively (written and verbally), maintain confidentiality, work with speed and accuracy, grasp technical information quickly, and work independently and as a team member.
• Attention to detail and ability to work well in teams and individually.

What we can offer you:

• Medical, dental, vision, STD, LTD, Life insurance, etc.
• 25 days paid time off, 11 paid holidays and bereavement leave
• Education Assistance Program
• Paid Parental Bonding Leave
• Wellness benefits
• Life event coverage
• Service awards
• Financial benefits including 401(k) match, stock purchase plan, short-term incentives and long-term equity earning opportunities
• Logo wear discounts
• Free checking account, checks and discounted bank services

About Us:

German American Bancorp and its family of financial services companies employ talented, compassionate people throughout the organization, truly making German American special. Delivering genuine, customized, personal service with a focus on truly serving customers and communities well, our employees bring the Shield of Excellence commitment to life with each and every interaction.

German American Bank is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (pregnancy, sexual orientation, or gender identity), age (40 or older), national origin, genetic information, veteran status, disability, or any other basis protected by law.

German American is committed to the full inclusion of all qualified individuals. As part of this commitment, if you require reasonable accommodation in completing the application process, interviewing, or completing any pre-employment testing, please direct your inquiries to our Talent Acquisition team at 812-482-0717 or [e-mail].

German American employees are required to adhere to laws and regulations applicable to banks and to German American policies and procedures. Applicants should expect to complete necessary pre-employment screening pursuant to these laws, regulations, and policies.

All employees at German American are responsible for adhering to compliance laws, regulations, and established Bank policies and procedures, including Bank Secrecy Act, Anti-Money Laundering, and Countering the Financing of Terrorism.