Vice President - Information Security Risk

Randolph Brooks Federal Credit Union; San Antonio (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401(k) with matching incentives

Medical, vision and dental benefits

Tuition reimbursement plans

Paid time off

Job summary

A leading credit union in Texas seeks a Vice President of Information Security Risk to oversee IT/security risk management. The role requires developing risk frameworks, conducting assessments, and collaborating with stakeholders to promote a culture of security. Ideal candidates will have a Bachelor's degree and 5+ years of experience in IT/cybersecurity, with significant management experience. This position offers a full-time role in a well-rated workplace with comprehensive benefits.

Qualifications

• 5+ years information technology or cybersecurity experience, or 10+ years relevant experience in lieu of a degree.
• Comprehensive knowledge of IT and Information Security standards.
• 5+ years of management experience.

Responsibilities

• Develop and enforce IT/security risk standards.
• Conduct risk assessments and compliance checks.
• Develop metrics to monitor IT/security risks.

Skills

Information security

Project management

Governance

Risk management

Leadership

Analytical skills

Education

Bachelor’s Degree in Information Systems, Cybersecurity, Computer Science

Tools

NIST CSF

CIS Controls

Job description

Vice President – Information Security Risk

Join to apply for the Vice President – Information Security Risk role at Randolph Brooks Federal Credit Union

Randolph‑Brooks Federal Credit Union (RBFCU) is the largest credit union in Texas with more than 1 million members and total assets exceeding $15 billion.

Recognized for financial stability, our credit union consistently receives the highest ratings of “Five Star” and “Superior” from respected organizations that evaluate financial institutions in the United States. We’re frequently recognized as one of the best workplaces in San Antonio, Austin, the state of Texas and the country.

The Vice President – Information Security Risk will provide key leadership in identifying, assessing, and managing information technology/security risk across the Credit Union ensuring the risk exposure is aligned to strategic objectives, risk profile, and regulator expectations. In addition, the Vice President will collaborate with senior management, business units, and regulators to develop and implement effective risk management frameworks, policies, and practices. This includes establishing a second line of defense information technology / security risk oversight program to identify, measure, monitor, and report related risks along with the overall effectiveness of the Credit Union’s Information Security Program.

Essential Functions and Responsibilities

• Develop and establish a second line of defense information technology/security risk framework and oversight program to oversee IT/security activities across the enterprise.
• Develop, establish, and enforce IT/security risk standards; measure and report on adherence to defined standards.
• Perform oversight activities such as risk reviews, risk assessments, control monitoring, and validation testing to identify IT/security risks or non‑compliance with policies, program procedures and standards, applicable laws, rules or regulations.
• Engage with key stakeholders to develop proactive risk mitigation strategies for areas of non‑compliance or increased risk; review and validate mitigation plans to ensure identified risk is mitigated to an acceptable level.
• Develop and maintain key metrics to monitor and oversee IT/security risks in accordance with the Credit Union’s Risk Appetite; report results to management, senior leadership, and applicable risk or Board‑level committees.
• Collaborate with the Enterprise Risk Management (ERM) function to ensure integration and reporting of IT/security risks within the ERM program.
• Monitor industry trends and emerging risks to inform or recommend enhancements to the information security program accordingly.
• Collaborate with senior management and business units to establish a culture of information security by actively promoting security awareness and shared responsibility.
• Actively seek regular discussions with key stakeholders to provide risk guidance, consultation, and credible challenge for implementations or changes in IT/security activities.
• Serve as liaison and support during internal/external audits or regulatory examinations of the information security program.
• Consistently model conflict resolution, tact, and negotiation skills through appropriate persuasion and genuine empathy throughout all interactions.
• Coach and train direct reports in IT/security risk identification, risk analysis, risk measurement, control development & testing; also provide mentoring and professional development opportunities to direct reports.
• All other duties as assigned (essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).

Requirements

• Bachelor’s Degree (Information Systems, Cybersecurity, Computer Science, Business preferred).
• Minimum 5 years of information technology, cybersecurity, governance, risk management or other related work experience OR 10 years of related work experience in lieu of a degree (experience within financial institutions or other regulated industry is a plus).
• Minimum 5 years of management experience.
• Comprehensive knowledge and experience in applying IT and Information Security standards and governance frameworks (NIST CSF, CIS Controls, etc.).
• Knowledge and experience in applying risk management practices, including risk identification, risk analysis, risk measurement, control development and testing.

Skills and/or Certification/Licensing

• Information security, risk or audit related designation or certification, such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA) or other equivalent.
• Proficient oral and written communication and presentation skills, specifically for briefings to upper management and executive committees with both technical and non‑technical backgrounds.
• Strong leadership, staff management, and project management skills.
• Strong organizational and time management skills.
• Strong relationship building and problem solving skills.
• Sound judgment and critical thinking skills, ability to think strategically considering impact to credit union operations and safety and soundness.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

Benefits

• 401(k) with matching incentives — up to 10 percent.
• Medical, vision and dental benefits available to employees and their families from the first day of employment.
• Tuition reimbursement plans.
• Pharmacy discount programs.
• Flexible Spending (FSA), Health Savings (HSA) and Dependent Care account options.
• Paid time off.
• Parental leave.
• Company‑paid benefits including: long‑term disability, basic life insurance, wellness program, credit‑monitoring service, employee assistance program, training and volunteer opportunities.

Seniority Level

Mid‑Senior level

Employment Type

Full‑time

Job Function

Management and Information Technology

Industries

Financial Services and Banking

Get notified about new Vice President Information Security jobs in San Antonio, TX.