VP InfoSec Officer

Bridgewater Bank; Saint Louis Park (MN); Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Bridgewater Bank is seeking an experienced Vice President, Information Security Officer to lead information security, business continuity, incident response, and third-party risk programs. The role partners with the Chief Risk Officer and requires collaboration with leaders across business lines to identify, assess, monitor, and mitigate cybersecurity risks. The position offers a hybrid work model in Minnesota with a competitive base pay and discretionary incentive.

Qualifications

• Bachelor's degree in information security, technology, finance, or a related field.
• 7+ years of information security, cybersecurity, technology, or IT audit experience in banking, financial services, or a regulated industry.
• Experience owning or overseeing an information security program, risk assessments, control design, and assurance monitoring.
• Knowledge of technology platforms, IAM, data protection, vulnerability management, security ops, incident response, and cyber resilience.
• Ability to translate security issues into clear business/risk recommendations.
• Proven ability to present cybersecurity risk matters to Boards and senior management.
• Experience with regulators or external auditors on information security matters.
• Excellent communication skills and attention to detail.
• CISSP, CISA, CISM, CRISC, or equivalent certification.

Responsibilities

• Partner with CRO and CTO to strengthen governance of information security, business continuity, and third-party risk.
• Create information security risk assessments and propose scalable improvements.
• Coordinate data governance and cybersecurity controls with business leaders.
• Manage incident response plan and communications to stakeholders.
• Oversee data governance, retention, and privacy laws related to information security.
• Oversee third-party risk reviews including SOCs and vendor assessments.
• Develop metrics and indicators for information security and business continuity readiness.
• Administer information security awareness and training program.
• Serve as liaison for regulatory examinations and audits, maintaining documentation.

Skills

Information security

Risk management

Stakeholder communication

Regulatory liaison

Leadership

Vendor management

Incident response

Data governance

Education

Bachelor's degree in information security

CISSP/CISA/CISM/CRISC certification

Tools

IAM systems

Security monitoring tools

Vulnerability scanners

Job description

We are seeking an experienced Vice President, Information Security Officer to oversee Bridgewater Bank's information security, business continuity, incident response, and third-party risk programs. The role will report to the Chief Risk Officer and ensure alignment with the Bank's Enterprise Risk Management program, regulatory expectations, and strategic growth. The Information Security Officer will be expected to collaborate with leaders across all business lines and lines of defense to identify, assess, monitor, report, and mitigate information and cybersecurity risks.

RESPONSIBILITIES:

• Partner with the Chief Risk Officer and the Chief Technology Officer to continuously strengthen the governance and oversight of the Bank’s information security, business continuity, and third-party risk programs
• Facilitate a culture of continuous improvement by creating information security risk assessments, determining the effectiveness of IT security controls, and proposing scalable enhancements when potential gaps exist.
• Coordinate with business leaders to ensure proper data governance and cybersecurity controls are created and maintained, including oversight of infrastructure and application security, vulnerability management, access management, and cybersecurity and fraud resiliency.
• Manage the incident response plan to ensure appropriate preparation, detection, response, and recovery of potential incidents and ensure proper communication to applicable stakeholders.
• Provide oversight of data governance, record retention, and privacy laws as they relate to information and cybersecurity.
• Oversee the third-party risk reviews related to information security and business continuity planning, including SOC reviews and vendor assessments.
• Develop monitoring tools and key risk indicators related to the effectiveness of the information security program and the readiness of the business continuity programs that can be reported to Senior Management and the Board.
• Administer the Bank’s information security awareness and training program.
• Serve as a primary information security liaison for regulatory examinations and independent audits, and ensure the maintenance of proper documentation for any related requests.

QUALIFICATIONS:

• Bachelor's degree in information security, technology, finance, or another business-related field.
• 7+ years of information security, cybersecurity, technology, or IT audit experience in banking, financial services, or another regulated industry.
• Experience with meaningful ownership or oversight of an information security program, risk assessments, control design, and assurance monitoring.
• Working knowledge of technology platforms, identity and access management, data protection, vulnerability management, security operations, incident response, and cyber resilience.
• Ability to evaluate risk materiality, form evidence-based conclusions, and translate technical security issues into clear business and risk recommendations.
• Demonstrated ability to present cybersecurity and technology risk matters to Boards, executive management, committees, and both technical and non-technical audiences.
• Proven ability to build effective relationships across business lines and lines of defense, influence without relying on hierarchy, and drive sustainable remediation.
• Experience with regulators or external auditors on information security or cybersecurity matters
• Excellent verbal, written, and interpersonal communication skills, with strong attention to detail, critical thinking, accuracy, prioritization, and follow-through.
• CISSP, CISA, CISM, CRISC, or equivalent certification.

ABOUT BRIDGEWATER BANK:

Picture yourself at one of the Twin Cities’ best places to work, surrounded by people who challenge you, support you, and inspire you to be your best. Welcome to Bridgewater Bank.

We’re on a mission to be the finest entrepreneurial bank in the Twin Cities. Like true entrepreneurs, we run fast and lean. We are in constant evolution and the runway for personal and professional growth is long. People are our strength, and that’s why we’ve created and sustained an award-winning culture that promotes growth and celebrates the big and little wins along the way.

At the end of the day, we believe competitive salaries, top-tier benefits, a hybrid work model, and transparency into the business is a given. Working together toward something meaningful with people you enjoy is just a bonus! Will you join us?

COMPENSATION & BENEFITS:

The typical annual base pay range for this role is between $150,000 - $200,000. Compensation may vary based on individual job-related knowledge, skills, expertise, and experience. This position is eligible for a discretionary annual incentive program driven by organization and individual performance.

Bridgewater Bank provides a broad offering of competitive benefits including (but not limited to):

• Basic term and optional term life insurance
• Short-term and long-term disability
• Parental leave
• 401(k) with employer match
• Paid vacation & paid holidays

PLEASE NOTE:

The above is intended to describe the general content of and requirements for this position. It is not to be construed as an exhaustive list of duties, responsibilities, or requirements. It is Bridgewater Bank’s policy to promote equal employment opportunities. All personnel decisions, including, but not limited to, recruiting, hiring, training, promotion, compensation, benefits and termination, are made without regard to race, creed, color, religion, national origin, sex, age, marital status, sexual orientation, gender identity, citizenship status, veteran status, disability or any other characteristic protected by applicable federal, state or local law.

STATUS:Exempt

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.