Strategic Information Security Manager – Banking & Compliance

UKG; Montpelier (VT); On-site; USD 130,000 - 186,000; Full time

Job summary

UKG is seeking an Information Security Manager to support the CISO for UKG National Trust Bank, ensuring security aligned with banking regulations. You will coordinate with IT, Infosec, and business units to implement policies and risk controls across the organization.

Responsibilities include risk assessments, incident response, audits, and training, with governance through the information security committee and BCM planning to sustain secure operations for NTB.

Qualifications

• 10+ years in information security, IT, or similar cybersecurity leadership.
• Knowledge of security principles, frameworks (NIST, ISO 27001), risk management.
• Awareness of FFIEC banking regulations and privacy rules.
• Experience writing/updating security policies.

Responsibilities

• Develop and implement NTB information security strategy aligned with UKG and regulatory requirements.
• Oversee protection of NTB data and assets from threats.
• Develop/update security policies and security protocols.
• Identify and mitigate security risks to improve resilience.
• Manage security audits, risk assessments, and incident response.
• Collaborate with IT/Infosec to integrate security measures.
• Maintain security dashboards with KRIs/KPIs and trends.
• Lead BCM/DR planning and tabletop exercises.
• Participate in NTB security committee and IT/IS projects.

Skills

Information Security

Information Technology

Audit

Banking/Finance experience

Leadership

Communication

Analytical thinking

Policy writing

Tools

SIEM tools

System administration

Firewalls

Intrusion detection/prevention

Data Loss Prevention

Encryption tools

Job description

UKG is seeking an Information Security Manager to support the CISO for UKG National Trust Bank, ensuring security aligned with banking regulations. You will coordinate with IT, Infosec, and business units to implement policies and risk controls across the organization.

Responsibilities include risk assessments, incident response, audits, and training, with governance through the information security committee and BCM planning to sustain secure operations for NTB.