VP, Information Security & Risk Strategy (Hybrid)

Workers Credit Union; Littleton (MA); Hybrid; USD 188,000 - 251,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) plan

Paid time off

Job summary

Workers Credit Union is seeking a strategic VP, Information Security Officer to lead enterprise security governance, risk management, and regulatory alignment. This executive role drives risk oversight, incident response leadership, and executive reporting to protect member data and technology assets.

The VP will partner with Risk, Compliance, Legal, IT, and business leaders to embed security into product development, vendor relationships, and enterprise initiatives, while guiding the security

Qualifications

• Deep knowledge of information security governance, risk management, and regulatory compliance.
• Experience leading enterprise security programs and governance.
• Ability to communicate complex security & regulatory topics to executives.

Responsibilities

• Lead enterprise Information Security Risk Management Program governance.
• Develop, update, and enforce information security policies, standards, and controls.
• Oversee risk assessments, regulatory readiness, and reporting to board and executives.
• Coordinate security operations, access governance, and vendor risk management.
• Lead incident response planning, tests, and coordination across teams.
• Promote security awareness and governance across risk, compliance, IT, and legal.

Skills

Information security governance

Cybersecurity risk management

Regulatory compliance

Privacy

Third-party risk

Incident response

Executive reporting

Leadership

Communication

Job description

Workers Credit Union is seeking a strategic VP, Information Security Officer to lead enterprise security governance, risk management, and regulatory alignment. This executive role drives risk oversight, incident response leadership, and executive reporting to protect member data and technology assets.

The VP will partner with Risk, Compliance, Legal, IT, and business leaders to embed security into product development, vendor relationships, and enterprise initiatives, while guiding the security