Senior Information Risk & Compliance Strategist

Columbia Bank; Spokane (WA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) retirement plan

Paid time off

Job summary

Columbia Bank seeks a seasoned Information Governance, Risk and Compliance leader to oversee risk management, policy development, and controls across the bank’s technology and data environments.

The ideal candidate has 7–10 years in information security, IT audit, or IT operations, with familiarity across CIS, NIST, ISO 27002 and FFIEC CAT, PCI DSS, GLBA, and HIPAA. Strong storytelling with data is required.

Qualifications

• Knowledge of risk management processes including information security management.
• Experience evaluating controls relative to information security frameworks such as ISO 27002, NIST 800 series, or FFIEC IT booklets and CAT.
• Knowledge of systems and network concepts including access, authorization, configuration, and design.
• Experience applying encryption, access controls, network security, and security operations concepts.

Responsibilities

• Lead information governance, risk, and compliance efforts across the bank's technology and data environments.
• Perform formal risk assessments and self-assessments for key processes and technologies using industry standards.
• Analyze controls to ensure compliance with documented standards and bank policies.
• Advise technology teams and business units on compliance readiness and gap remediation.
• Maintain gap analysis documents and coordinate with stakeholders to improve banking practices.

Skills

Information security

IT audit

Risk management

Data analytics

Regulatory knowledge

Vendor risk

Education

Bachelor's degree in computer science

HS Diploma/GED

Tools

CIS

NIST 800

ISO 27002

FFIEC CAT

PCI DSS

GLBA

HIPAA

Job description

Columbia Bank seeks a seasoned Information Governance, Risk and Compliance leader to oversee risk management, policy development, and controls across the bank’s technology and data environments.

The ideal candidate has 7–10 years in information security, IT audit, or IT operations, with familiarity across CIS, NIST, ISO 27002 and FFIEC CAT, PCI DSS, GLBA, and HIPAA. Strong storytelling with data is required.