SVP Information Security Officer

Conselium Compliance Search; Los Angeles (CA); On-site; USD 140,000 - 230,000; Full time

Job summary

Conselium Compliance Search is seeking a senior Information Security leader to design, implement, and govern a comprehensive security program for a banking institution in Los Angeles. You will partner with the Chief Risk Officer and Board, driving strategy, governance, and regulatory alignment.

The role demands hands-on security leadership, risk assessment, policy development, and strong communication with regulators. On-site work five days a week in Los Angeles is required.

Qualifications

• This role requires extensive information security experience within banking or financial services.
• Experience with regulatory examinations and oversight by regulators is essential.
• Strong familiarity with NIST, ISO 27001, CIS Controls, SIEM, DLP, encryption and cloud security.

Responsibilities

• Develop, implement, and maintain the bank’s information security program and governance framework.
• Lead strategy and roadmaps aligned to business objectives and regulatory requirements.
• Establish enterprise-wide information security policies, standards, and controls.
• Oversee incident preparedness, detection, response, and remediation with regulators.
• Manage third-party risk, vendors, and cloud security environments.
• Report to the CRO, executive team, and Board on risk and remediation status.
• Manage one direct report and promote security awareness across the organization.

Skills

Information security

Banking/financial services

Regulatory examinations

NIST/ISO 27001/CIS Controls

Education

CISSP, CISM, CISA, CRISC certifications

Tools

SIEM

IDS/IPS

DLP

Encryption

Cloud security tools

Job description

Location: Los Angeles, California (please note this is a full-time in office position)

Why Join Us:

• Position with opportunity to lead and improve the information security program for an established and successful consumer / community banking organization
• Highly visible role with direct exposure to executive management, the Board of Directors, and regulators
• Culture built on valuing empowerment and achieving goals through a superior customer experience

Responsibilities:

• Reporting to the Chief Risk Officer, this position will be responsible for developing, implementing, and maintaining the bank’s information security program, strategy, and governance framework
• Develop and continuously enhance the Information Security Strategy, Architecture, and Roadmap to align with business objectives, risk appetite, and regulatory requirements
• Establish and maintain enterprise-wide information security policies, standards, procedures, and controls
• Hands-on review and administration of the security environment, including firewall rules, system configurations, and security appliances and tools, working alongside managed security service providers
• Develop and oversee the enterprise-wide information security risk assessment process, identifying threats, assessing the sufficiency of controls, prioritizing residual risks, and tracking remediation to completion
• Oversee key control processes including identity and access management, privileged access, data loss prevention, encryption, vulnerability and patch management, secure configuration, logging, and monitoring
• Direct cybersecurity incident preparedness, detection, response, investigation, recovery, and post-incident remediation, including required notifications to regulators and other stakeholders
• Lead cyber resilience programs in coordination with the bank’s business continuity management program
• Oversee information security risk associated with third parties, service providers, and cloud environments
• Serve as the primary liaison with internal and external auditors, regulators, and independent assessors
• Ensure compliance with applicable laws, regulations, and guidance, including GLBA, FFIEC guidance, and California privacy and breach-notification requirements
• Report periodically to executive management and the Board of Directors on the bank’s risk profile, material threats, significant incidents, control effectiveness, and remediation status
• Develop and promote enterprise-wide security awareness and training programs, and manage one direct report

Requirements:

• This position is based on-site in Los Angeles five days per week
• You must have substantial information security experience, including banking or financial services experience and direct involvement in regulatory examinations (ideally with the FRB and DFPI)
• Strong hands-on technical skills, with working knowledge of NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, and cloud security
• Experience performing information security risk assessments, including GLBA
• Ability to present to the Board of Directors and interact with regulators; ideally you will have previously served as an Information Security Officer
• Bachelor’s degree in a related field; CISSP, CISM, CISA, CRISC, or equivalent certification preferred