Applications have closed
Description
This role is a strategic executive leader responsible for overseeing the information security, cybersecurity, and IT governance functions of the credit union. This role ensures the confidentiality, integrity, and availability of member and organizational data while aligning technology and security initiatives with business objectives and regulatory requirements.
Here’s what you can expect from the job and what you need to be successful:
Job Duties
- Develop and execute a comprehensive information security and IT strategy aligned with the credit union’s mission, regulatory requirements, and risk appetite.
- Serve as a trusted advisor to the CEO, CRO, Board, and executive team on cybersecurity, data protection, and technology risk.
- Serves as the Credit Union’s Security Officer for NCUA, IT, and Board Reporting.
- Lead the design, implementation, and continuous improvement of the enterprise cybersecurity program.
- Oversee threat detection, incident response, vulnerability management, and security operations as well as oversee enterprise resiliency.
- Ensure alignment with NIST, FFIEC, NCUA, and other relevant framework and regulatory guidance.
- Direct enterprise IT governance, including infrastructure, architecture, and digital transformation initiatives as well as policy and guideline requirements for the Credit Union.
- Ensure secure and resilient technology operations that support innovation and member experience.
- Ensure compliance with applicable laws and regulations (e.g., GLBA, NCUA, PCI-DSS, GDPR).
- Lead cybersecurity examinations and audits and manage relationships with regulators and third-party assessors.
- Collaborate with the Chief Risk Officer and other leaders to integrate cybersecurity into the enterprise risk management framework.
- Manage and Lead the Identity and Access Management strategic and operational direction for the organization.
- Conduct regular risk assessments and scenario planning to identify and mitigate emerging threats.
- Foster a culture of security awareness and accountability across all levels of the organization.
- Lead training and education programs to promote secure behaviors and reduce human risk.
- Build and lead a high-performing team of IT and security professionals.
- Promote continuous learning, innovation, and professional development within the team.
- Provide regular updates to the Board of Directors and relevant committees on cybersecurity posture, key risks, and strategic initiatives.
Essential Skills
- Required education: Bachelor’s degree or 4 additional years of relevant experience in lieu of a degree, advanced degree is preferred.
- Required experience: 10+ years of relevant experience, including 10 years as a people leader.
- Proven success managing large, complex frameworks in a regulated financial institution.
- Experience in the financial services or credit union industry is strongly preferred.
- Professional certifications such as CISSP, CISM, CISA, or CCISO.
- Deep knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001, CIA, COBIT).
- Proven ability to lead cross-functional teams and manage complex projects.
- Strong communication skills with the ability to translate technical risks into business terms.
- Experience working with Boards and regulatory agencies.
- Familiarity with digital lending platforms and fintech partnerships.
Location: Hillsboro, OR 97124 | Marlborough, MA 01752 (HYBRID)
Target Compensation: $270k – $310k annually + annual bonus
Benefits options include:
- Traditional medical, dental, and vision coverage
- 401K matching up to 5% per pay period
- 11 paid federal holidays
- Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility for special employee pricing is subject to standard account requirements and underwriting criteria)
First Tech is not currently offering Visa transfer/ sponsorship for this position.
C1VP
C1ISO
