Principal Information Security Engineer

Beacon-Bank; Pittsfield (MA); On-site; USD 96,000 - 177,000; Full time

Job summary

Beacon Bank is seeking a Vice President of Information Security to lead security architecture and engineering across cloud, network, and endpoint domains. You will guide the strategic direction, oversee senior engineers, and collaborate with IT, risk, and business units to safeguard systems and data.

The role requires deep expertise in identity access management, security monitoring, and regulatory alignment, with a focus on AI security frameworks and risk management in a regulated banking

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field preferred.
• Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials preferred.

Responsibilities

• Administer, maintain, and enhance enterprise information security technologies.
• Lead and develop Information Security Engineering staff while providing strategic direction.
• Maintain security standards across cloud, network, endpoints, identity, application, and data security domains.
• Partner with IAM to improve access control and user lifecycle security controls.
• Serve as technical leader for AI security architecture and risk management.
• Develop and maintain security standards, runbooks, and technical documentation.
• Assist with security assessments for new systems and vendor solutions.
• Support audit, regulatory, risk assessment, and compliance activities.

Skills

Security architecture

Cloud security

Identity and access management

SIEM/logging

AI security

Threat monitoring

Security project leadership

Education

Bachelor’s degree in Information Security/CS/IT

Security certifications such as CISSP/CISM/CCSP/GIAC/Security+

Equivalent combination of education and experience

Tools

Microsoft Entra ID

Active Directory

Privileged access management tools

Email security tools

Endpoint security tools

Cloud security tools

Job description

Job Description

Officer: VP

Division: Technology

Department: Information Security

Reports to: Chief Security Officer

Status: Exempt/ Officer

Grade: 13

Salary Range: $96,089 - $177,069

Actual compensation within the pay range will be determined based on factors including, but not limited to, skills, prior relevant experience, and specific work location.

Location: MA, CT, NY, VT, RI

Supports the Company's Information Security Program by engineering, architecting, maintaining, and improving security technologies, identity and access controls, monitoring capabilities, and defensive security processes. The Principal Information Security Engineer partners with Information Technology, Identity and Access Management, Risk, Compliance, application owners, business units, and third-party service providers to protect Company systems, data, customers, and employees.

Key Accountabilities

• Administer,maintain, and enhance enterprise information security technologies, including endpoint security, email security, data loss prevention, application security, network security, identity protection, cloud security, logging, monitoring, and security related platforms.Lead the design, implementation, and continuous improvement of enterprise security architecture and engineering programs.
• Lead and develop Information Security Engineering staff while serving as the senior technical contributor, providing operational oversight, and strategic direction.
• Maintain security standards across cloud, network, endpoints, identity, application, and data security domains.
• Partner with Identity and Access Management to improve access control, privileged access management, authentication, conditional access, role-based access, and user lifecycle security controls.
• Serve as the Company’s technical leader for AI security architecture and AI risk management. Assists in designing security frameworks and technical guardrails for Generative AI, Machine Learning, Agentic AI, and emerging AI technologies. Assists with evaluating security risks associated with AI platforms, agents, models, APIs, third-party AI vendors, and cloud AI services. Assists with developing controls for data protection, AI monitoring, identity management, and secure AI deployment.
• Develop andmaintainsecurity standards, procedures, runbooks, technical documentation, diagrams, control evidence, and operational playbooks for assigned security platforms and processes.
• Assistwith security assessments for new systems, technology changes, vendor solutions, mergers, integrations, branch initiatives, and enterprise projects to ensureappropriate securityrequirements areidentifiedand implemented.
• Support audit, regulatory, risk assessment, and compliance activities by providing evidence, explaining technical controls, remediating findings, andmaintainingdocumentation thatdemonstratescontrol effectiveness.
• Identifyopportunities to automate security operations, improve alert quality, reduce manual processes, strengthen detection capabilities, and mature the Company's overall security posture.
• Requires a high degree of collaboration with IT Operations, Infrastructure, Service Desk, Application Support, Risk Management, Internal Audit, Compliance, and business stakeholders to resolve security issues and support secure business operations.
• Participate in security incident response, change management, disaster recovery, business continuity, and other operational activities asrequired.
• Ensure compliance with all banking laws, rules, regulations, and prescribed policies/practices/procedures necessary to reduce risk and uphold ethical standards related to and required by one's duties.

Education

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field preferred.
• Equivalentcombination of education, technical certifications, and relevant experience may be considered.
• Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials preferred.

Experience

• 7+ years of experience in information security, cybersecurity engineering, security operations, infrastructure security, identity security, or related technology roles.
• 3+ years of experience supporting security technologies in a regulated financial institution, banking environment, or similarly regulated industry preferred.
• Experience with Microsoft Entra ID, Active Directory, privileged access management, email security tools, endpoint security tools, cloud security, network security, data security, security automation, SIEM/logging.
• Experience securing AI, Generative AI, Machine Learning, Agentic AI, or similar AI ecosystems. Experience implementing security controls for AI systems, including data loss prevention (DLP), access controls, encryption, prompt security, model protection, vendor security reviews, and monitoring for AI-related threats and misuse.

Skills & Knowledge

• Strong understanding of information security principles, defense-in-depth, identity and access management, incident response, secure configuration, and security monitoring.
• Working knowledge of banking security expectations, risk management practices, audit evidence requirements, and regulatory frameworks such as FFIEC, GLBA, NIST Cybersecurity Framework, and related industry guidance.
• Strong technical troubleshooting skills with the ability to analyze security events, system behavior, logs, vulnerabilities, and control exceptions.
• Ability to translate technical security issues into clear business risk language for IT, business, risk, audit, and executive stakeholders.
• Strong written and verbal communication skills, including the ability to develop standards, procedures, summaries, diagrams, and control evidence.
• Strong organizational skills with the ability to manage multiple priorities, document work clearly, meet deadlines, and drive issues to resolution.
• High degree of professionalism, discretion, integrity, and sound judgment when handling sensitive information and security incidents.
• Proficient in Microsoft Office Suite and collaboration platforms.

Beacon Bank is an Equal Opportunity Employer - all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. If you would like to contact us regarding the accessibility of our website, need assistance completing the application process, or would like to request alternative methods of applying, please contact us [e-mail] .

We endeavor to make this site accessible to any and all users.

Beacon Bank is an Equal Opportunity Employer - all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. If you would like to contact us regarding the accessibility of our website, need assistance completing the application process, or would like to request alternative methods of applying, please contact us at [e-mail] .