Why Broadway Bank:

We are one of thelargest independently owned banks in Texas with offerings in personal andprivate banking, wealth management, business banking and mortgage lending.

Purposeof the Position:

Broadway Bank is offering a senior level position, DirectorInformation Security, at our headquarters in San Antonio, TX. The DirectorInformation Security is responsible for providing leadership and strategicvision across teams in support of enterprise security initiatives. The Director Information Security will workwith bank leadership to oversee the formation and operations of a bank-wideInformation Security Program and risk management environment that is in supportof corporate goals. Responsible fordeveloping, managing and enforcing the Broadway Bank Information SecurityPolicies, implementing security awareness programs and developing bestpractices to ensure that the bank is providing adequate protection over theirinformation assets and are following all regulatory requirements.

KeyAccountabilities:

• Drive and modify the Information Security Program by executing projects that advance and improve Information Security for the organization.
• Responsible for the development, implementation, and enforcement of effective and reasonable information security policies and practices to secure Broadway’s environment and data within all operational areas of the company.
• Accountable for the operational security activities of Broadway’s environment by evolving incident response, staying up to date of emerging threats, collaborating with other IT teams, and ensuring compliance with relevant regulations.
• Lead, provide technical leadership and manage a team of Information Security professionals including 3rd party.
• Lead audit requirements for the Information Technology department including internal and external auditors ensuring IT controls are defined and in adherence.
• Develop an on-going risk assessment and risk analyses to help the organization develop security standards and procedures that support strategic, tactical and operational objectives.
• Responsible for compliance reporting related to Information Security.
• Lead efforts to internally assess, evaluate and make recommendations to ensure that controls are adequately addressed in the development stage of any new technology, products or services.
• Mature an Incident Response Program to address security incidents (breaches), respond to policy violations and implement correction of security breaches. Serve as the official contact point for information security.
• Ensure compliance with established information security policies, procedures, and standards through ongoing monitoring process.
• Oversee the identity and access management program for all applications across the enterprise.
• Maintain and mature security procedures used by security team in on-going administration of new platforms.
• Ensures development project design requirements address any potential impact to Information Security and prepare recommendations detailing those efforts.
• Responsible for developing and delivering educational training on information security for employees.
• Assures that adequate Cyber Security controls are in place to protect the confidentiality, integrity, and availability of computer systems, data, software and hardware. Monitors and assures the data integrity and internal security of information linked to outside sources through communication processes.
• Effectively communicates and manages security controls between the IT partners and business units.
• Chairs committees related to Information Security.
• Makes recommendations on appropriate personnel, physical and technical security controls.
• Participates in resolving problems with information security violations.
• Understand business processes in order to work with vendors, IT partners and user departments to enhance information security.