Information Security Manager

POSITION SUMMARY:



Responsibilities include but are not limited to the following:



• Develops, maintains, and oversees bank-wide IT security programs and protocols

• Develops, maintains, and oversees policies, processes, and control techniques to address all applicable information security requirements

• Oversees and manages the information and cyber security risk management. Evaluates all information systems, data processes, and communication for security risks.

• Monitors, detect, contain, mitigate, and report incidents that impair the confidentiality, integrity, and availability of the bank’s data and network infrastructure

• Oversees the bank’s Vendor Management Vulnerability Program to ensure that all information systems, software, and hardware devices are properly backed-up, secured, maintained, and patched

• Provides oversight, governance, and security for the bank’s servers, switches, routers, computers, and other digital equipment and systems

• Oversees network security and cybersecurity protocols for the Bank’s networks, helping to ensure the safety and security of the organization’s IS network and electronic documents

• Hires, trains, and oversees personnel with significant information security information duties as well as assist board members, executive and senior management, and bank associates regarding their IT security responsibilities

• Conducts annual performance reviews for all associates

• Sets and tracks and departmental goals to meet the bank’s strategic plans

• Prepares informational and regulatory IS reports, spreadsheets, and graphs for executive management and the board of directors

• Manages and maintains the bank’s IT infrastructure, including servers, networks, and storage systems

• Implements and oversees disaster recovery and business continuity plans to ensure the availability and integrity of IT systems

• Collaborate with IT teams to design and implement secure systems and applications

• Manages access controls and ensure that only authorized personnel have access to sensitive information and systems

• Oversees the implementation of security patches and updates to all IT systems and applications

• Develops and maintains documentation for IT security policies, procedures, and incident response plans

• Ensures the secure configuration and management of all IT assets, including hardware, software, and network devices

• Conducts regular vulnerability assessments and penetration testing to identify and address security weaknesses

• Negotiates with technology vendors, contractors to obtain the highest possible level of services for the Bank

• Performs cost savings and efficiency assessments; implements effective changes

• Collaborates with all business lines to identify IS needs and develop strategies to meet needs;

• Assesses, identifies, develops, and implements internal controls and safeguards to mitigate and eliminate potential related risks, threats and exposure

• Manages and verifies effective change management

• Previews and improves existing software and networking equipment and hardware

• Creates a superior technology culture with an excellent reputation

• Consistently demonstrates professional appearance, image, and represents the CTB Brand

• Demonstrates personal accountability; maintains and handles all confidential, complex, and sensitive matters and information discretely

• Monitors, manages, and ensures that policies, procedures, and controls are followed; ensures compliance and information system/security related concerns are resolved effectively

• Drives a positive internal/external customer experience and ensures that exceptional customer service is provided throughout the enterprise

• Serves on the Bank Technology Committee and other assigned committees; attends Audit and Compliance Committee and other meetings

• Promotes and establishes strong, positive, and productive working relationships with all lines of business within the Bank

• Adheres to all policies, procedures, and expectations, including customer confidentiality

• Monitors and enforces compliance related policies, procedures, processes, guidelines, and bank’s practices

• Exceeds all established goals, objectives, and expectations

• Creates processes for report preparation, presentations, and correspondence

• Delivers consistent excellent quality customer service and establishes relationships in a manner that enhances the overall marketing efforts of the bank

• Maintains a sound and comprehensive working knowledge and understanding of all bank policies, procedures, guidelines, rules, expectations related to areas of responsibilities and banking solutions and services offered by the Bank, its subsidiaries, strategic alliances, third-party service vendors and competitors

• Demonstrates consistent professional appearance, behavior, image, high level of integrity, ethics and consistently represents the CTB Brand

• Attends, participates, promotes and represents the Bank at business, professional, and community events, functions, meetings, organizations, associations, programs, and activities to support and broaden Bank’s image and visibility

• Leads initiatives, adds value, supports the Bank’s vision, mission, core values, business principles, goals, and objectives

• Manages other assigned functions and performs other duties and responsibilities as assigned



QUALIFICATIONS, SKILLS, AND ABILITIES:



• Bachelor’s degree in information security, computer science, or related field; CISSP, CISM, or CISA Certifications preferred

• Minimum of years of proven progressive information technology experience in a banking environment

• Minimum of 5 years managerial and project management experience

• Extensive knowledge of banking industry best practices for network systems security and implementation

• Proficient in Microsoft Office and working knowledge of FIS and other banking systems

• Must have a broad understanding of emerging technology knowledge and experience