Information Security Officer

German American Bank; Jasper (IN); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health benefits

PTO 25 days

Education assistance

Parental leave

Wellness benefits

Life insurance

401(k) match

Stock purchase plan

Discounts

Free checking

Job summary

The Information Security Officer (ISO) at German American Bank leads information and physical security efforts, partnering with Technology Services to coordinate security initiatives across the company. The role oversees the Information Security and Physical Security teams, develops the security program, privacy and business continuity plans, and ensures regulatory compliance.

Strong leadership, governance, and collaboration are essential to protect sensitive data.

Qualifications

• 5–10 years information and physical security experience.
• 2–3 years leadership/managerial experience.
• Bachelor's Degree in information/cybersecurity or related field.
• Knowledge of FFIEC, FDIC, PCI, GLBA, NIST regulations.
• Certifications CISSP/CISM/CISA or equivalent preferred.
• Strong written and verbal communication and ability to work independently or in a team.

Responsibilities

• Develop and maintain the information security program and risk assessment.
• Coordinate disaster recovery and business continuity; lead incident response efforts.
• Report on enterprise risk and security metrics to Tech Risk Committee and Board Risk Committee.
• Maintain privacy program in compliance with GLBA, HIPAA, PCI.
• Monitor threats and provide guidance on security controls and best practices.
• Oversee daily security operations and log reviews; ensure follow-up actions.
• Evaluate third-party security programs and manage user access provisioning.
• Lead Information Security and Physical Security teams; recruit and manage staff.
• Collaborate with Technology Services on security initiatives and project timelines.
• Respond to audits and examinations and address findings.
• Oversee security training and awareness programs.

Skills

Leadership

Communication

Attention to detail

Teamwork

Confidentiality

Education

Bachelor's degree in Information/Cybersecurity

Tools

CISSP

CISM

CISA

Job description

The Information Security Officer (ISO) at German American Bank is responsible for establishing and coordinating information security efforts, privacy efforts and business resumption planning across the company. The role is positioned as a key partner to the Technology Services department – ensuring security and IT activities are completed in a coordinated, prioritized and timely manner. The ISO carries direct leadership responsibility for both the information security and physical security team(s). This role is responsible for ensuring the bank’s information security strategy is optimal and includes the appropriate controls for mitigating identified threats and risks. This includes research, development, planning, implementation, communication and enforcement of IT security design, policies, procedures, solutions and standards.

What You’ll Do:

• Information Security Program: Develop and maintain the company's information security program, ensuring compliance with all regulatory guidance and information security best practices. This includes policies and procedures aligned with the bank’s information security program as well as ownership of the information security risk assessment for the bank.
• Business Continuity & Disaster Recovery: Maintain, coordinate, and support the bank's enterprise-wide disaster recovery and business continuity plan, including periodic testing. Key contributor and leader in any Incident Response Team issue, including documentation of any information security related incident.
• Enterprise Risk Management reporting – establish and monitor KRIs related to information security to align with the bank’s ERM framework and risk appetite. Participate and contribute reports, projects and findings at management’s Tech Risk Committee quarterly, and present the annual Information Security Program at Board Risk Committee annually.
• Privacy Program: Maintain compliance with applicable privacy laws including GLBA, HIPAA, PCI, etc.
• Threat Monitoring: Proactively monitor, evaluate, and implement best practices related to enterprise information security. Provide internal guidance on emerging threats.
• Daily Security Operations: Ensure completion of daily reviews of security logs and reports; ensure appropriate follow-up action is taken.
• Third-Party Risk: Evaluate effectiveness of information security programs of third-party software, hardware, and service providers.
• User Access Management: Oversee user access provisioning for all company systems.
• Team Leadership: Lead the Information Security and Physical Security Team(s), including recruiting, hiring, training, and performance management.
• IT Partnership: Work closely and collaborate with the Technology Services department to protect information assets through appropriate tools. Coordinate project timelines, resources and outcomes for any new information security initiatives with Technology Services.
• Audit & Examination Response: Respond to relevant audit and examination requests, manage resolutions of any findings.
• Training & Awareness: Oversee the bank’s information security training and awareness efforts, ensuring employees receive timely, role-based education on security practices and emerging threats.

What it Takes:

• To be successful as the Information Security Officer, you’ll need:
• 5-10 years information and physical security experience.
• 2-3 years leadership/managerial experience.
• Bachelor's Degree in Information/Cybersecurity, Computer Information Systems, Computer Science, Information Technology Management, Network Management Systems, or related work experience.
• Knowledge and experience with regulatory bodies including FFIEC, FDIC and banking regulations such as, but not limited to PCI, GLBA, NIST and Cybersecurity.
• Certifications in or willing to obtain certification in CISSP, CISM, or CISA or equivalent recognized industry certifications.
• Ability to: communicate effectively (written and verbally), maintain confidentiality, work with speed and accuracy, grasp technical information quickly, and work independently and as a team member.
• Attention to detail and ability to work well in teams and individually.

What we can offer you:

• Medical, dental, vision, STD, LTD, Life insurance, etc.
• 25 days paid time off, 11 paid holidays and bereavement leave
• Education Assistance Program
• Paid Parental Bonding Leave
• Wellness benefits
• Life event coverage
• Service awards
• Financial benefits including 401(k) match, stock purchase plan, short-term incentives and long-term equity earning opportunities
• Logo wear discounts
• Free checking account, checks and discounted bank services

About Us:

German American Bancorp and its family of financial services companies employ talented, compassionate people throughout the organization, truly making German American special. Delivering genuine, customized, personal service with a focus on truly serving customers and communities well, our employees bring the Shield of Excellence commitment to life with each and every interaction.

German American Bank is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (pregnancy, sexual orientation, or gender identity), age (40 or older), national origin, genetic information, veteran status, disability, or any other basis protected by law.

German American is committed to the full inclusion of all qualified individuals. As part of this commitment, if you require reasonable accommodation in completing the application process, interviewing, or completing any pre-employment testing, please direct your inquiries to our Talent Acquisition team at 812-482-0717 or [e-mail].

German American employees are required to adhere to laws and regulations applicable to banks and to German American policies and procedures. Applicants should expect to complete necessary pre-employment screening pursuant to these laws, regulations, and policies.

All employees at German American are responsible for adhering to compliance laws, regulations, and established Bank policies and procedures, including Bank Secrecy Act, Anti-Money Laundering, and Countering the Financing of Terrorism.