Senior Information Risk Officer

Columbia Bank; Phoenix (AZ); Sur place; USD 85 000 - 120 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

401(k) with employer match

Life Insurance

Tuition assistance

Mental health resources

Identity protection

Discount marketplace

Paid time off

Résumé du poste

Columbia Bank is seeking a senior leader to drive information governance, risk, and compliance. You will build and maintain risk programs, policies, and standards to ensure secure operations across the Bank.

You will apply cybersecurity risk assessment expertise, data analytics, and storytelling with data to communicate risk to technology teams and executives. Responsibilities include governance documentation, formal risk/self-assessments, control analysis, and coordinating with Internal Audit,

Qualifications

• Bachelor's degree in computer science or equivalent preferred.
• 7–10 years of information security, IT audit, or IT operations experience required.
• Knowledge of ISO 27002, NIST 800 series, FFIEC IT booklets, and CAT.
• Experience with risk management processes and regulatory frameworks (PCI DSS, GLBA, HIPAA).

Responsabilités

• Lead information governance, risk, and compliance programs and develop policies.
• Perform formal risk assessments and self-assessments for key processes and technologies.
• Analyze controls to ensure compliance with bank policies and standards.
• Provide advisory support to technology teams for compliance readiness.
• Track gaps in risk programs and coordinate with stakeholders to close them.
• Evaluate new assets or vendors for risk ranking.
• Collaborate with Legal, Internal Audit, and other groups to align risk objectives.
• Stay current with regulatory changes and bank policies.

Connaissances

Governance & risk leadership

Cybersecurity risk assessment

Data analytics

Policy development

Regulatory knowledge

Vendor risk management

Formation

Bachelor's Degree in computer science

HS Diploma/GED

Description du poste

Spokane, Washington

Lake Oswego, Oregon

Greenwood Village, Colorado

South Jordan, Utah

Seattle, Washington

Lakewood, Washington

Phoenix, Arizona

Full time

JR102880

About the Role:

Responsible for leading information governance, risk, and compliance efforts, including the establishment and maintenance of key risk management, monitoring, and validation activities and facilitating the development of relevant policies and standards. Our candidate will have an background in cybersecurity risk assessment with a detailed understanding of control requirement adherence, data analytics, and the ability to accurately "tell a story" using data.

• Maintain governance documentation detailing how information should be secured including the maintenance and development of internal process/procedure documentation.
• Perform formal risk assessments and self-assessments for key processes and technologies, leveraging industry standards like CIS, ITIL, and COBIT to build a unique program for Columbia Bank.
• Analyze internal technology and security controls to ensure compliance with documented and approved standards. Ensure that information systems and vendors within the Bank’s operating environment comply with company policies, standards, and procedures.
• Drive and provide advisory and subject-matter expertise to technology teams and business units for compliance readiness.
• Responsible for tracking and monitoring gaps in key Bank risk programs. Maintain gap analysis documents; gather necessary information from technology and lines of business to identify areas to improve banking practices.
• Identify new assets or vendors and oversee the risk evaluation process to determine the risk ranking.
• Facilitate and liaise with technology leaders, key corporate risk and operational groups (including TPO, TAG, Internal Audit, Corporate Compliance, Enterprise Risk Management, Legal) to ensure alignment with these groups and meet obligations.
• Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
• Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
• Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation P, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
• May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
• Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
• Takes personal initiative and is a positive example for others to emulate.
• Embraces our vision and strategic direction
• May perform other duties as assigned.

About You:

• H.S. Diploma/GED (preferred)
• Bachelor's Degree in computer science or equivalent (preferred)
• 7-10 years — of experience in or a combination of information security, IT audit, or information technology operations. (Required)
• Knowledge of risk management processes including information security management. Experience evaluating controls relative to information security frameworks such as ISO 27002, NIST 800 series, or financial services regulatory frameworks such as the FFIEC IT booklets and Cybersecurity Assessment Tool (CAT).
• Knowledge of systems and network concepts including: access, authorization, configuration, and design.
• Demonstrated understanding of information security concepts including: encryption, access controls, network security, security operations, security architect, threat modeling and design.
• Knowledge of applicable regulatory requirements including PCI DSS, GLBA and HIPAA.
• Ability to operate in a cross-functional environment, build, and foster relationships with other departments and stakeholders.
• Ability to anticipate and respond to changing priorities and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness.

Licenses/Certifications

• CISA, CRISC, CISSP, CISM, or SANS GIAC (GSNA, etc.)

Travel Requirements

• Occasional

The pay range for this role is $85,000.00 - $120,000.00.

The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.

Primary Location:

Ability to work fully onsite at posted location(s).

111 N Wall St Building Spokane WA 99201

Our Benefits:

We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.

We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.

Our Commitment to Diversity:

Columbia Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: [e-mail] .

To Staffing and Recruiting Agencies:

Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.

At Columbia Bank, we’re redefining what it means to bank and to build a career. As the West’s premier banking experience, we combine the strength and scale of a leading financial institution with the heart and mindset of a community bank. With more than 350 locations across eight states, we deliver relationship-based service backed by regional expertise and resources that help families and businesses thrive.

Our culture is built on Do RIGHT , which means:

• Relationships: We create authentic connections with customers, colleagues, and communities.
• Impact: Every role here makes a meaningful difference in people’s lives and local economies.
• Growth: We invest in your success with career development, mentorship, and learning opportunities.
• Heart: We care deeply about doing what’s best for our customers and each other.
• Trust: Integrity and transparency guide everything we do.

Why work for Columbia Bank?

• A strong, stable financial foundation with over $67 billion in assets and a diverse portfolio that supports flexibility and opportunity.
• A culture of belonging and purpose, where your ideas matter and your work has impact.
• Competitive benefits and flexibility designed to help you thrive personally and professionally.
• Community engagement that matters, from supporting local businesses to empowering youth through financial literacy initiatives.

Ready to Do RIGHT for your career, your community, and your future? Explore opportunities and join Columbia Bank today.