Strategic IT GRC Lead — Cybersecurity & Compliance

Columbia Bank; Hillsboro (OR); On-site; USD 80,051 - 165,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) with employer match

Employee assistance program

Life insurance

Disability insurance

Tuition assistance

Mental health resources

Identity theft protection

Legal support

Auto and home insurance

Pet insurance

Discount marketplace

Paid vacation and holidays

Job summary

Columbia Bank is seeking a seasoned cybersecurity and IT governance professional in Hillsboro, OR. You will lead risk, compliance, and policy activities across technology teams and business units, ensuring alignment with regulatory standards.

The role requires extensive experience in information security, IT audit, and IT operations. You will collaborate with Internal/External Audit, Compliance, and Legal to strengthen the bank's control environment and risk posture.

Qualifications

• 7-10 years of experience in information security, IT audit, or IT operations.
• Experience evaluating controls relative to ISO 27002, NIST, or FFIEC IT books.
• Knowledge of PCI DSS, GLBA, and HIPAA.
• Ability to operate in a cross-functional environment and influence stakeholders.

Responsibilities

• Lead cybersecurity governance, risk, and compliance programs.
• Perform risk analyses and self-assessments against industry standards.
• Develop and analyze IT controls to ensure policy compliance.
• Coordinate SOX IT audit activities and liaise with auditors.
• Track and remediate GRC issues in ServiceNow with proper evidence.

Skills

Information security

IT audit

Risk management

Regulatory knowledge

Cross-functional collaboration

Threat modeling

Education

Bachelor's degree in Computer Science or equivalent

Tools

ServiceNow IRM/GRC

Job description

Columbia Bank is seeking a seasoned cybersecurity and IT governance professional in Hillsboro, OR. You will lead risk, compliance, and policy activities across technology teams and business units, ensuring alignment with regulatory standards.

The role requires extensive experience in information security, IT audit, and IT operations. You will collaborate with Internal/External Audit, Compliance, and Legal to strengthen the bank's control environment and risk posture.