What are the responsibilities and job description for the Chief Information Security Officer position at FIRSTBANK SOUTHWEST?
Job Summary: Responsible for establishing and maintaining the bank’s information security strategy, policies, and programs to protect information assets, customer data, and financial transactions from cyber threats.
Education/Experience: A minimum of the following education/experience is required:
- Bachelor’s degree in Cyber Security, Information Technology, Computer Science plus 5 years experience; OR
- Master’s degree in Cyber Security, Information Technology, Computer Science
Job Specific Responsibilities:
- Develops and implements a comprehensive information security strategy aligned with the bank’s objectives.
- Establishes and enforces information security policies, procedures, and best practices.
- Provides strategic security guidance to executive leadership and the board of directors.
- Leads the development and execution of cybersecurity initiatives to mitigate risks.
- Identifies, assesses, and manages cybersecurity risks across the organization.
- Ensures compliance with relevant regulations (e.g., GLBA, FFIEC) and industry standards.
- Oversee audits, risk assessments, and security testing to identify vulnerabilities.
- Collaborates with legal and compliance teams to address cybersecurity-related legal and regulatory requirements.
- Implements security monitoring, threat detection, and response mechanisms.
- Leads incident response efforts and coordinate with law enforcement and regulatory agencies during security breaches.
- Oversees security awareness training for employees and ensures adherence to security policies.
- Oversees the deployment and maintenance of security technologies, including firewalls, intrusion detection systems, and encryption.
- Ensures secure design and architecture of digital banking systems, ATMs and payment networks.
- Collaborates with IT teams to integrate security into IT infrastructure and cloud computing strategies.
- Enforces identity and access management policies.
- Conducts regular access reviews to ensure compliance and minimize risks.
- Oversees bank’s IDP and works to improve and secure authentication.
- Conducts regular asset and threat-based risk assessments and provide reports to executive management.
- Recommends and tracks implementation/compliance with security baselines.
- Leads Vendor Management program by evaluating risk of vendors, establishing controls, and working with vendor owners to perform due diligence reviews.
- Leads Business Continuity Program to ensure continued bank resilience and availability.
- Other duties as assigned.
- General computer skills
- Microsoft Office, specifically Word and Excel
- CISSP or other Technical Certifications preferred
Expectations of an Employee:
- Works well independently
- Treats all customers and fellow employees with respect
- Exceeds customer expectations
- Meets customer needs
- Maintain confidentiality of all bank records
- Conducts interactions with honest, ethical, and strong moral principles
- Performs at the highest level
- Takes responsibility for actions
- Does what is expected
- Leads by example and takes initiative
- Works as a team
- Efficiently shares information in a collaborating and proactive manner
- Pays attention to detail
- Solves problems
- Makes sound decisions
- Manages time effectively
- Prioritizes effectively
- Performs multiple tasks simultaneously
- Shows up for work and is on time
- Complies with all laws and regulations
- Completes all required training
- Adheres to Bank Values
Supervisory Responsibilities: Supervises Information Security Specialist position.
Amount of Travel: Occasional, up to 10 % for TBA IT & Security Forums, FS-ISAC conferences, and industry events.
Physical Requirements:
- May need to sit/stand for long periods of time
- Sustained visual concentration while working at the computer
- Typing on a keyboard for long periods of time
- Handle high stress environment
- Maintain professional appearance
Benefits Include:
- Medical, Rx, Dental, and Vision insurance
- HSA, FSA, and Limited FSA
- Employer paid and voluntary Life Insurance/AD&D
- Short-Term Disability
- Long-Term Disability
- Accident/Hospital Indemnity/Critical Illness voluntary plans
- Identify Theft Protection
- 401k with employer match
- Vacation, Sick Leave, and Holiday pay
- Tuition Reimbursement
- Gym membership discounts
- Annual payrate increases
- Incentive based bonuses
It is the policy of FirstBank Southwest to provide equal opportunity employment (EOE) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, FirstBank Southwest will provide reasonable accommodations for qualified individuals with disabilities. FirstBank Southwest is an affirmative action employer.