Strategic CISO: Lead Enterprise InfoSec & Risk

Origin Bank; Ruston (LA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Origin Bank is seeking a Chief Information Security Officer (CISO) to lead enterprise information security, cybersecurity, and data protection programs. The role ensures confidentiality, integrity, and availability of assets while aligning with business objectives and regulatory expectations.

Location preference includes Louisiana markets, with flexibility for other gulf states. The CISO will drive governance, control assurance, threat protection, incident response, and third‑party risk

Qualifications

• Experience in information security governance and risk management.
• Strong understanding of regulatory expectations and audit readiness.
• Ability to lead security programs and report to executive leadership.

Responsibilities

• Develops and manages enterprise information security programme aligned with risk appetite.
• Establishes security policies, standards, and procedures.
• Reports on cybersecurity risks, KRIs, and programme performance to senior leadership.
• Promotes security awareness and accountability across the enterprise.
• Oversees key security controls and monitoring processes.
• Coordinates incident response and tabletop exercises with stakeholders.
• Supports third-party risk management and vendor security engagements.
• Coordinates data protection strategies with Legal, Compliance, and Risk teams.

Skills

Governance

Risk management

Threat protection

Incident response

Third-party risk

Data protection

Security operations

Regulatory compliance

Leadership

Job description

Origin Bank is seeking a Chief Information Security Officer (CISO) to lead enterprise information security, cybersecurity, and data protection programs. The role ensures confidentiality, integrity, and availability of assets while aligning with business objectives and regulatory expectations.

Location preference includes Louisiana markets, with flexibility for other gulf states. The CISO will drive governance, control assurance, threat protection, incident response, and third‑party risk