Information Security Governance Officer
Posted
Summary
Serves as the designated Information Security Officer for Park Community Credit Union, independently overseeing cybersecurity risk: leading the InfoSec program, maintaining policies and risk assessments, overseeing vendor security and incident response governance, and reporting to management and governance committees. Core focus is NCUA/FFIEC/GLBA regulatory compliance and security oversight rathe
Role:
By emphasizing ONE Park, ONE mission, ONE team, the Information Security Governance Officer serves as Park's designated Information Security Officer, reporting to the VP of Risk and providing independent oversight of information security and cybersecurity risks across the organization. This position leads the Credit Union's Information Security Program by establishing security requirements, assessing risks, evaluating controls, monitoring compliance, tracking remediation, and escalating material concerns. The role also oversees third-party information security risks, incident response governance, and regulatory compliance while collaborating with Information Technology. The officer regularly reports information security risks, trends, and program effectiveness to management and relevant governance committees.
Essential Functions & Responsibilities:
By emphasizing ONE Park, ONE mission, ONE team, the Information Security Governance Officer serves as Park's designated Information Security Officer, reporting to the VP of Risk and providing independent oversight of information security and cybersecurity risks across the organization. This position leads the Credit Union's Information Security Program by establishing security requirements, assessing risks, evaluating controls, monitoring compliance, tracking remediation, and escalating material concerns. The role also oversees third-party information security risks, incident response governance, and regulatory compliance while collaborating with Information Technology. The officer regularly reports information security risks, trends, and program effectiveness to management and relevant governance committees.
Essential Functions & Responsibilities:
- Lead the Credit Union's Information Security Program, including identifying, assessing, monitoring, and reporting cybersecurity and technology-related risks. Maintain security risk assessments, establish security requirements, evaluate mitigating controls, and provide independent challenge of Information Technology and other departments. Ensure material risks, exceptions, and deficiencies are documented, escalated, and aligned with the Credit Union's risk appetite.
- Develop, maintain, and oversee information security policies, standards, and requirements. Monitor emerging cybersecurity threats, industry practices, and applicable NCUA, FFIEC, GLBA, and other regulatory expectations. Assess organizational compliance, recommend program enhancements, and regularly report information security risks, trends, and material concerns to management and relevant governance committees.
- Oversee information security risks associated with third-party service providers and technology vendors. Collaborate with Vendor Management and Information Technology to establish security due diligence requirements, evaluate vendor security assessments and SOC reports, and review contractual security protections. Monitor identified vendor risks, track outstanding deficiencies, and escalate material concerns through established governance channels.
- Oversee the governance of the Credit Union's Incident Response Program, including incident response procedures, escalation protocols, regulatory notification considerations, and reporting requirements. Coordinate with Information Technology and other stakeholders to evaluate significant security incidents, monitor corrective actions, and oversee periodic incident response exercises. Provide governance oversight of information security considerations within business continuity and disaster recovery planning.
- Maintain information security governance documentation, including risk assessments, policies, exceptions, incident records, and remediation tracking. Coordinate information security matters for internal audits, external audits, and regulatory examinations, including responding to findings, monitoring corrective action plans, and reporting material deficiencies.
- Performs other duties as assigned.
Performance Measurements:
1. To be an ambassador of Park's culture supporting the credit union's mission to build thriving communities together ensuring words and actions align with the Park VIBE that defines our Core Values: • Vibrant Connections • Inclusive Excellence • Bold Compassion • Endless Empowerment
2. To provide friendly, professional and accurate service and support to all members and coworkers.
3. To provide independent oversight of the Credit Union's Information Security Program by identifying, assessing, monitoring, and reporting information security risks, evaluating compliance with established security requirements, and ensuring material deficiencies and exceptions are appropriately documented, tracked, and escalated.
4. To maintain documentation as required for tracking and audit review.
5. To oversee information security risks associated with third-party service providers and incident response preparedness, ensuring appropriate due diligence, risk assessments, incident response procedures, and corrective action monitoring are maintained in accordance with the Credit Union's established security standards.
6. To maintain a professional work environment, promote teamwork, build respect among coworkers and present a businesslike appearance.
7. To follow all security policies and procedures and report discrepancies or suspicious activity to manager immediately.
Knowledge and Skills:
Experience Five to seven years of progressively responsible experience in information security, cybersecurity, information technology risk management, security governance, or a closely related field.
Education (1) A bachelor's degree; or (2) industry-recognized professional certifications, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Information Systems Auditor (CISA), in lieu of a degree.
Interpersonal Skills Work involves much personal contact with others inside and/or outside the organization for the purpose of first-level conflict resolution, building relationships, and soliciting cooperation. Discussions involve a higher degree of confidentiality and discretion, requiring diplomacy and tact in communication.
Other Skills 1. Knowledge of office equipment, word processing, spreadsheet, e-mail, personal computers, PC operating systems, etc. 2. Must be able to work and travel independently and use general office equipment. 3. Knowledge of cybersecurity technologies and security controls, including anti-malware, MDR/XDR, firewalls, and other security solutions, with the ability to assess associated risks and control effectiveness. 4. Understanding of network security principles, IT infrastructure, and cybersecurity frameworks sufficient to evaluate information security risks and provide independent oversight.
Physical Requirements
PHYSICAL DEMANDS The physical demands described here are representative of those required to successfully perform the essential functions of this position, but do not necessarily constitute an exhaustive list of all essential functions. To the extent required by any applicable law, reasonable accommodations will be made to enable qualified individuals with disabilities to perform essential functions where this can be done without posing a direct threat to self or others. While performing the essential duties of this position, the employee frequently must sit, stand, and walk short distances. The employee frequently uses hands and fingers to count currency and handle, manipulate, and feel objects, documents, and office tools and equipment. Reads, writes, listens, speaks, and uses personal computers, copiers, telephones, and other office equipment and software throughout the work day. The employee is occasionally required to stoop, bend, squat, and reach overhead with hands and arms. Occasionally pushing and pulling of office furniture and other objects. The employee may occasionally lift and/or move up to 15 pounds and on occasion lift and/or move up to 25 pounds.
Park Community Credit Union is an Equal Opportunity Employer/ Veterans/ Disabled