Information Security Officer — Lead IS Program & Risk

HawaiiUSA FCU; Honolulu (HI); On-site; USD 111,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with company contribution

Tuition reimbursement

Volunteer time off

Credit union membership

Paid training

Job summary

HawaiiUSA FCU in Honolulu, HI, seeks an Information Security Officer to own and evolve the security program and governance. You will drive risk assessments, incident response, and third-party risk, coordinating with an outsourced CISO and Board reporting.

The role requires leadership in building an internal security function within an enterprise risk framework, with opportunities to shape policy and security controls across cloud, on-premises, and vendor relationships.

Qualifications

• 7+ years in information security or related field, with finance experience preferred.

Responsibilities

• Own and maintain the Information Security Program (ISP) with governance committee input.
• Conduct annual risk assessments of information systems and vendors.
• Oversee incident response plan including 72-hour notification rule.
• Lead vulnerability management, testing, and patch programs.
• Direct third-party risk management for cloud and fintech relationships.
• Bridge outsourced CISO with internal policy and board reporting.
• Transition from outsourced to internal information security team with org design.

Skills

ISO Standards

Presentations

Access Management Governance

Incident Response

Regulatory Examination & Audit

Executive & Board Reporting

COBIT

Security Technologies

Attention to Detail

Facilitation

Identity Management Governance

Cloud & SaaS Security

Education

Bachelor's degree in Computer Science/Information Security/Information Technology

CISSP

CISM

CRISC

CISA

GIAC / GSEC

CCSK / CCSP

CGRC

Job description

HawaiiUSA FCU in Honolulu, HI, seeks an Information Security Officer to own and evolve the security program and governance. You will drive risk assessments, incident response, and third-party risk, coordinating with an outsourced CISO and Board reporting.

The role requires leadership in building an internal security function within an enterprise risk framework, with opportunities to shape policy and security controls across cloud, on-premises, and vendor relationships.