Information Security Officer

FVP Information Security Officer

Financial Services - Banking

Location: Los Angeles, California (please note this is a full-time in office position)

Why Join Us:

• Position with opportunity to lead and improve the information security program for an established and successful consumer / community banking organization
• Highly visible role with direct exposure to executive management, the Board of Directors, and regulators
• Culture built on valuing empowerment and achieving goals through a superior customer experience

Responsibilities:

• Reporting to the Chief Risk Officer, this position will be responsible for developing, implementing, and maintaining the bank’s information security program, strategy, and governance framework
• Develop and continuously enhance the Information Security Strategy, Architecture, and Roadmap to align with business objectives, risk appetite, and regulatory requirements
• Establish and maintain enterprise-wide information security policies, standards, procedures, and controls
• Hands-on review and administration of the security environment, including firewall rules, system configurations, and security appliances and tools, working alongside managed security service providers
• Develop and oversee the enterprise-wide information security risk assessment process, identifying threats, assessing the sufficiency of controls, prioritizing residual risks, and tracking remediation to completion
• Oversee key control processes including identity and access management, privileged access, data loss prevention, encryption, vulnerability and patch management, secure configuration, logging, and monitoring
• Direct cybersecurity incident preparedness, detection, response, investigation, recovery, and post-incident remediation, including required notifications to regulators and other stakeholders
• Lead cyber resilience programs in coordination with the bank’s business continuity management program
• Oversee information security risk associated with third parties, service providers, and cloud environments
• Serve as the primary liaison with internal and external auditors, regulators, and independent assessors
• Ensure compliance with applicable laws, regulations, and guidance, including GLBA, FFIEC guidance, and California privacy and breach-notification requirements
• Report periodically to executive management and the Board of Directors on the bank’s risk profile, material threats, significant incidents, control effectiveness, and remediation status
• Develop and promote enterprise-wide security awareness and training programs, and manage one direct report

Requirements:

• This position is based on-site in Los Angeles five days per week
• You must have substantial information security experience, including banking or financial services experience and direct involvement in regulatory examinations (ideally with the FRB and DFPI)
• Strong hands-on technical skills, with working knowledge of NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, and cloud security
• Experience performing information security risk assessments, including GLBA
• Ability to present to the Board of Directors and interact with regulators; ideally you will have previously served as an Information Security Officer
• Bachelor’s degree in a related field; CISSP, CISM, CISA, CRISC, or equivalent certification preferred