Senior Information Security Manager - Banking

UKG; Lansing (MI); On-site; USD 130,000 - 186,000; Full time

Job summary

UKG is seeking an Information Security Manager to support the CISO in building and enforcing security for UKG National Trust Bank (NTB). The role interfaces with IT, IS, and business units to drive policy, risk assessments, and audits in a banking context, including FFIEC compliance and data protection.

Responsibilities cover developing security strategy, overseeing data protection, and coordinating incident response and disaster recovery planning with cross-functional teams.

Qualifications

• 10+ years in information security, IT, or senior cybersecurity roles, preferably in banking/finance.
• Knowledge of security frameworks (NIST, ISO/ISE 27001) and risk management.
• Experience writing/updating security policies and compliance with FFIEC.
• Ability to lead, collaborate, and communicate with diverse teams.

Responsibilities

• Assist CISO in developing/implementing NTB information security strategy and regulatory alignment.
• Oversee protection of NTB data and technology assets from threats.
• Develop/update security policies, procedures, and controls.
• Identify and mitigate security risks and support audits and examinations.
• Coordinate with IT/Infosec teams to integrate security measures across operations.
• Participate in risk assessments, incident response, and disaster recovery planning.
• Monitor security metrics, build dashboards, and report trends to leadership.

Skills

Information security

Risk management

FFIEC/regulatory knowledge

Leadership

Communication

Policy writing

SIEM tools

Firewalls

IDS/IPS

DLP tools

Encryption tools

Tools

SIEM tools

Firewalls

IDS/IPS

DLP tools

Encryption tools

Job description

UKG is seeking an Information Security Manager to support the CISO in building and enforcing security for UKG National Trust Bank (NTB). The role interfaces with IT, IS, and business units to drive policy, risk assessments, and audits in a banking context, including FFIEC compliance and data protection.

Responsibilities cover developing security strategy, overseeing data protection, and coordinating incident response and disaster recovery planning with cross-functional teams.