Senior Information Risk & Compliance Leader

Columbia Bank; Phoenix (AZ); On-site; USD 92,000 - 115,000; Full time

Job summary

Columbia Bank in Spokane, WA seeks an experienced information governance, risk, and compliance leader. The role drives the establishment and maintenance of risk programs, policies, and standards, and requires a background in cybersecurity risk assessment, data analytics, and storytelling with data.

You will partner with technology, audit, compliance, and legal teams to ensure regulatory alignment across PCI DSS, GLBA, HIPAA, and related controls, tracking gaps, evaluating vendors, and mentoring

Qualifications

• 7-10 years of experience in information security, IT audit, or IT operations.
• Knowledge of risk management and information security frameworks such as ISO 27002, NIST 800 series, or FFIEC IT booklets and CAT.
• Knowledge of systems and network concepts including access, authorization, configuration, and design.
• Demonstrated understanding of information security concepts including encryption, access controls, network security, security operations, security architecture, threat modeling and design.
• Knowledge of PCI DSS, GLBA and HIPAA regulatory requirements.
• Ability to operate in a cross-functional environment and adapt to changing priorities.

Responsibilities

• Maintain governance documentation detailing how information should be secured and update internal process/procedure docs.
• Perform formal risk assessments and self-assessments for key processes and technologies using CIS, ITIL, COBIT as reference.
• Analyze internal technology and security controls to ensure compliance with standards.
• Advise technology teams and business units for compliance readiness.
• Track and monitor gaps in risk programs; generate gap analysis from data from tech and lines of business.
• Identify new assets or vendors and oversee risk evaluation to determine risk ranking.
• Coordinate with technology leaders, audit, compliance, legal, ERM to align efforts.
• Stay up to date on regulations and complete required training.

Skills

Information security

IT audit

Risk management

Regulatory knowledge

Cross-functional teamwork

Network security

Education

Bachelor's degree in CS or equivalent

H.S. Diploma/GED preferred

Job description

Columbia Bank in Spokane, WA seeks an experienced information governance, risk, and compliance leader. The role drives the establishment and maintenance of risk programs, policies, and standards, and requires a background in cybersecurity risk assessment, data analytics, and storytelling with data.

You will partner with technology, audit, compliance, and legal teams to ensure regulatory alignment across PCI DSS, GLBA, HIPAA, and related controls, tracking gaps, evaluating vendors, and mentoring