Information Security Officer

Overview

The Information Security Officer (ISO) is responsible for developing, implementing, and maintaining the bank’s information security program to ensure the confidentiality, integrity, and availability of data and systems. This role ensures compliance with regulatory requirements, industry standards, and internal policies while proactively managing cybersecurity risks. It also provides independent oversight and effective challenge to IT initiatives, ensuring security risks are identified, assessed, and mitigated in alignment with regulatory requirements and organizational standards.

Responsibilities

Governance & Compliance

• Maintain security policies, standards, and guidelines, including the overall Information Security Program, ensuring compliance with applicable laws and regulations.
• Prepare and present security reports to senior management, IT committees, and the Board.

Audits and Reviews

• Ensure the IT audit program is appropriate for the risk, size, and complexity of the institution.
• Engage IT auditors and facilitate IT audits and examinations, as well as track and report findings to management, IT committees, and the Board.
• Lead user access reviews for critical systems and oversee user access evaluations of business line technologies.
• Conduct social engineering tests and implement targeted training as warranted.

Management Collaboration

• Partner with business line management to map information flows, identify vulnerabilities, and design effective protection strategies.
• Provide expert guidance on security risks inherent in new initiatives, recommending practical mitigation measures to support business objectives.

Business Continuity and Incident Response

• Maintain, evolve, and test the bank’s business continuity, disaster recovery, and incident response plans to ensure operational resilience.
• Lead the incident response team during security breaches or cyber events, coordinating swift containment, investigation, and recovery efforts.

Security Awareness & Training

• Develop and deliver engaging security awareness training programs for employees and the Board.
• Promote a culture of security throughout the organization.

Technical Oversight

• Oversee implementation of security controls such as firewalls, encryption, and intrusion detection systems.
• Collaborate with IT teams to ensure secure system configurations, effective patch management, and continuous monitoring of vulnerability management.
• Evaluate, monitor, and proactively recommend enhancements to data loss prevention program and encryption standards.
• Review vendor complementary user entity controls and validate implementation of the appropriate internal controls.

Qualifications

• Minimum of five (5) years’ experience in information security or IT risk management, preferably in banking or other financial services.
• Bachelor's degree in information security, cybersecurity, or a related field preferred.
• Professional certifications such as CISSP, CISM, or CISA preferred.
• Strong analytical and quantitative skills to assess risk, analyze data, and understand new concepts.
• Critical thinking skills with the ability to independently solve problems with data.
• Familiarity with banking regulations and compliance standards, including those set by the FDIC, FFIEC, and other regulatory bodies.
• Strong verbal and written communication skills to present findings and recommendations clearly.
• Ability to identify information security risks and develop strategies to mitigate them.
• High level of accuracy and attention to detail when analyzing data and preparing reports.
• Ability to work collaboratively with various departments, including audit and operations.
• Capacity to manage multiple projects and programs simultaneously.
• Ability to prioritize tasks and meet deadlines.

Location: North Dallas, on Preston Road at 635/LBJ Frwy

Join the NDBTeam!

We have a great team of friendly, talented, and inspiring people at NDBT. We take pride in offering exciting opportunities for employees to grow and follow their passions, while providing a great work-life balance as well as job stability. Founded in 1961, NDBT has a long-standing reputation in the community and strives to provide excellent customer service to our customers and communities. NDBT leadership and employees foster and contribute to our environment of mutual respect, accountability, creativity, and teamwork; and at all times to act with integrity, dignity, honor, and fairness. If this sounds like something you would like to be a part of – consider applying today.

North Dallas Bank and Trust is an Equal opportunity employer. This company considers candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.