InfoSec Governance & Risk Lead

Park Community Credit Union Foundation; Louisville (KY); On-site; USD 132,000 - 136,000; Full time

Job summary

Park Community Credit Union is seeking an Information Security Governance Officer in Louisville, KY to oversee the organization’s information security program, regulatory compliance, and incident response governance. The role reports to the VP of Risk and collaborates with IT and third-party vendors to manage security risks.

The ideal candidate has 5–7 years of security governance experience, a Bachelor's degree or equivalent certifications (CISM/CISSP/CISA), and strong risk assessment skills.

Qualifications

• Five to seven years of progressively responsible experience in information security, cybersecurity, information technology risk management, security governance, or a closely related field.
• Bachelor's degree is required or industry-recognized certifications in lieu of degree.
• Certifications such as CISM, CISSP, or CISA are valued.

Responsibilities

• Lead the Credit Union's Information Security Program, including identifying, assessing, monitoring, and reporting cybersecurity and technology-related risks.
• Develop, maintain, and oversee information security policies, standards, and requirements.
• Oversee information security risks with third-party providers and technology vendors.
• Oversee the governance of the Incident Response Program and regulatory notification considerations.
• Maintain information security governance documentation and coordinate audits.

Skills

Information security governance

Risk management

Vendor management

Communication

Education

Bachelor's degree

CISM

CISSP

CISA

Tools

Anti-malware

MDR/XDR

Firewalls

IT security controls

Job description

Park Community Credit Union is seeking an Information Security Governance Officer in Louisville, KY to oversee the organization’s information security program, regulatory compliance, and incident response governance. The role reports to the VP of Risk and collaborates with IT and third-party vendors to manage security risks.

The ideal candidate has 5–7 years of security governance experience, a Bachelor's degree or equivalent certifications (CISM/CISSP/CISA), and strong risk assessment skills.