Information Security Officer

Conselium Compliance Search; Los Angeles (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Conselium Compliance Search seeks an experienced Information Security leader to design, implement, and govern our security program in Los Angeles. You will work directly with the Chief Risk Officer and interact with regulators and the Board to align strategy with risk appetite and compliance requirements.

In this on-site, senior role, you will lead policy development, risk assessments, and incident response while managing one direct report.

Qualifications

• Bachelor’s degree in a related field and relevant certifications are preferred.
• Extensive hands-on information security experience in banking or financial services.
• Experience with regulatory examinations (FRB/DFPI) is highly desirable.

Responsibilities

• Develop and maintain the bank’s information security program and governance framework.
• Lead strategy, architecture, and roadmaps aligned to risk appetite and regulators.
• Oversee policies, standards, controls, and enterprise security operations.
• Perform hands-on reviews of firewalls, configs, and security appliances with MSPs.
• Manage risk assessments, risk tracking, and remediation prioritization.
• Direct incident preparedness, response, and post-incident remediation with regulators.

Skills

NIST

ISO 27001

CIS Controls

SIEM

IDS/IPS

DLP

Encryption

Cloud security

Education

Bachelor’s degree in a related field

CISSP/CISM/CISA/CRISC or equivalent

Job description

Location: Los Angeles, California (please note this is a full-time in office position)

Why Join Us:

• Position with opportunity to lead and improve the information security program for an established and successful consumer / community banking organization
• Highly visible role with direct exposure to executive management, the Board of Directors, and regulators
• Culture built on valuing empowerment and achieving goals through a superior customer experience

Responsibilities:

• Reporting to the Chief Risk Officer, this position will be responsible for developing, implementing, and maintaining the bank’s information security program, strategy, and governance framework
• Develop and continuously enhance the Information Security Strategy, Architecture, and Roadmap to align with business objectives, risk appetite, and regulatory requirements
• Establish and maintain enterprise-wide information security policies, standards, procedures, and controls
• Hands‑on review and administration of the security environment, including firewall rules, system configurations, and security appliances and tools, working alongside managed security service providers
• Develop and oversee the enterprise‑wide information security risk assessment process, identifying threats, assessing the sufficiency of controls, prioritizing residual risks, and tracking remediation to completion
• Oversee key control processes including identity and access management, privileged access, data loss prevention, encryption, vulnerability and patch management, secure configuration, logging, and monitoring
• Direct cybersecurity incident preparedness, detection, response, investigation, recovery, and post‑incident remediation, including required notifications to regulators and other stakeholders
• Lead cyber resilience programs in coordination with the bank’s business continuity management program
• Oversee information security risk associated with third parties, service providers, and cloud environments
• Serve as the primary liaison with internal and external auditors, regulators, and independent assessors
• Ensure compliance with applicable laws, regulations, and guidance, including GLBA, FFIEC guidance, and California privacy and breach‑notification requirements
• Report periodically to executive management and the Board of Directors on the bank’s risk profile, material threats, significant incidents, control effectiveness, and remediation status
• Develop and promote enterprise‑wide security awareness and training programs, and manage one direct report

Requirements:

• This position is based on-site in Los Angeles five days per week
• You must have substantial information security experience, including banking or financial services experience and direct involvement in regulatory examinations (ideally with the FRB and DFPI)
• Strong hands‑on technical skills, with working knowledge of NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, and cloud security
• Experience performing information security risk assessments, including GLBA
• Ability to present to the Board of Directors and interact with regulators; ideally you will have previously served as an Information Security Officer
• Bachelor’s degree in a related field; CISSP, CISM, CISA, CRISC, or equivalent certification preferred