Lead Information Security Officer, Banking

Automatic Data Processing, Inc.; Canton (CT); On-site; USD 88,000 - 170,000; Full time

Benefits offered by this job

Medical benefits

PTO & Paid time off

401(k) plan

Life insurance

Health savings account

Job summary

Automatic Data Processing, Inc. is seeking an Information Security Officer in Canton, CT to lead the development, implementation, and oversight of the Bank’s Information Security and Vendor Management Programs.

You will report to the Chief Risk Officer and safeguard systems and non-public information while coordinating audits, regulatory examinations, and board communications. The role requires managing risk assessments, incident response, policy development, and ongoing security awareness

Qualifications

• Bachelor’s degree in Computer Science, Management Information Systems, Cybersecurity, or a related field; equivalent applicable information security experience may be considered.
• At least five years of risk management experience, including experience assessing networking, hardware, software, information security, and vendor risks.
• CISSP, CISA, CISM, or a comparable certification is preferred.
• Familiarity with endpoint security solutions, vulnerability management tools, and security monitoring technologies.
• Basic understanding of information technology auditing procedures is required.
• Regular attendance and on-call availability are essential functions of the position.

Responsibilities

• Develop, implement, monitor, and continuously improve the Bank’s Information Security and Vendor Management Programs, including related policies, procedures, standards, guidelines, and templates.
• Conduct information technology, cybersecurity, and vendor risk assessments; review technology risks identified by business lines; and perform business impact analyses in alignment with the Business Continuity Plan and Vendor Risk Management Program.
• Identify and evaluate information and cybersecurity threats using recognized assessment methods, including FFIEC CAT and RSAT, and evaluate the security program against established frameworks such as NIST.
• Manage and oversee user entitlement reviews, network-use monitoring, outsourced penetration testing, vulnerability remediation, and the Bank’s Data Life Cycle program through secure destruction of non-public data.
• Develop dashboards and reports that demonstrate program performance, and present assessment results and program status to IT Steering, Operations/Technology, and Compliance Committees, Senior Management, and the Board of Directors.
• Promote a culture of information security through onboarding, awareness communications, phishing-campaign follow-up, and education for employees, customers, and the Board, as appropriate.
• Serve as the focal point for technology-related audits and regulatory examinations by supporting planning, coordinating requested documentation, recording responses, and tracking remediation of findings.
• Monitor applicable state and federal requirements, including the Connecticut Data Privacy Act and GLBA, and recommend updates based on regulatory changes and industry best practices.

Skills

Information security

Cybersecurity

Risk management

Regulatory compliance

Vendor management

Communication skills

Policy development

Programming & data protection

Education

Bachelor’s degree in Computer Science/IS/Cybersecurity

Job description

Automatic Data Processing, Inc. is seeking an Information Security Officer in Canton, CT to lead the development, implementation, and oversight of the Bank’s Information Security and Vendor Management Programs.

You will report to the Chief Risk Officer and safeguard systems and non-public information while coordinating audits, regulatory examinations, and board communications. The role requires managing risk assessments, incident response, policy development, and ongoing security awareness