Senior InfoSec Leader: Strategy, Risk & IR

Arizona Federal Credit Union; Phoenix, Northern (AZ, KY); Hybrid; USD 140,000 - 220,000; Full time

Job summary

Arizona Federal Credit Union seeks an information security leader to drive governance, strategy, and risk management across IT. The role oversees security operations, threat monitoring, and incident response, ensuring encryption, access controls, and regulatory compliance.

Strong collaboration with executives and business units is essential. Responsibilities include policy development, security architecture oversight, and ongoing security training.

Qualifications

• Bachelor's degree or equivalent technical training in information systems or cybersecurity.
• Ten (10) years of enterprise IT experience and five (5) years of information security experience.
• Financial services experience preferred.
• Certifications such as CISSP, CISM, CISA, GCIH or equivalent are desirable.

Responsibilities

• Directs information security strategy, policies, standards, architecture, and risk assessments.
• Monitors threats and recommends mitigating controls across the organization.
• Oversees security operations, including firewalls, VPNs, encryption, SIEM, and incident response.
• Leads security awareness, training, and continuous professional development.
• Provides monthly security posture updates to leadership and Board.

Skills

Information security

Cybersecurity operations

Enterprise security architecture

Risk assessment

Executive communication

Analytical thinking

Security monitoring

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field

Tools

Firewalls

VPNs

Encryption

SIEM

Intrusion detection

Job description

Arizona Federal Credit Union seeks an information security leader to drive governance, strategy, and risk management across IT. The role oversees security operations, threat monitoring, and incident response, ensuring encryption, access controls, and regulatory compliance.

Strong collaboration with executives and business units is essential. Responsibilities include policy development, security architecture oversight, and ongoing security training.