Information Security Officer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Canton, CT, US

Salary Range: $87,590.98 To $ Annually

Information Security Officer

Information Security | Banking

Reports to: Chief Risk Officer (CRO)

The Information Security Officer leads the development, implementation, and ongoing oversight of the Bank’s Information Security and Vendor Management Programs. Reporting to the Chief Risk Officer, this role safeguards systems and non-public information by identifying and addressing security risks, maintaining regulatory alignment, coordinating technology-related audits and examinations, and keeping Senior Management and the Board of Directors informed. The Officer also promotes organization-wide security awareness and works closely with Information Technology, business leaders, auditors, regulators, vendors, customers, and other external partners.

• Develop, implement, monitor, and continuously improve the Bank’s Information Security and Vendor Management Programs, including related policies, procedures, standards, guidelines, and templates.
• Conduct information technology, cybersecurity, and vendor risk assessments; review technology risks identified by business lines; and perform business impact analyses in alignment with the Business Continuity Plan and Vendor Risk Management Program.
• Identify and evaluate information and cybersecurity threats using recognized assessment methods, including FFIEC CAT and RSAT, and evaluate the security program against established frameworks such as NIST.
• Manage and oversee user entitlement reviews, network-use monitoring, outsourced penetration testing, vulnerability remediation, and the Bank’s Data Life Cycle program through secure destruction of non-public data.
• Develop dashboards and reports that demonstrate program performance, and present assessment results and program status to IT Steering, Operations/Technology, and Compliance Committees, Senior Management, and the Board of Directors.
• Promote a culture of information security through onboarding, awareness communications, phishing-campaign follow-up, and education for employees, customers, and the Board, as appropriate.
• Serve as the focal point for technology-related audits and regulatory examinations by supporting planning, coordinating requested documentation, recording responses, and tracking remediation of findings.
• Monitor applicable state and federal requirements, including the Connecticut Data Privacy Act and GLBA, and recommend updates based on regulatory changes and industry best practices.

• Strong knowledge of information security, cybersecurity, technology risk management, networking, hardware, software, and data-protection practices.
• Working knowledge of technology auditing procedures, regulatory examination support, vendor risk management, business continuity, and recognized security frameworks.
• Ability to analyze complex technical and business issues, exercise sound judgment, anticipate emerging risks, and recommend practical solutions.
• Excellent written and verbal communication skills, with the ability to explain security concepts clearly to audiences at all levels and to external stakeholders.
• Strong policy development, program management, reporting, presentation, collaboration, and organizational skills.
• Proficiency with Microsoft Office applications.
• Ability to handle confidential organizational information and sensitive non-public personal information with discretion.

• Bachelor’s degree in Computer Science, Management Information Systems, Cybersecurity, or a related field; equivalent applicable information security experience may be considered.
• At least five years of risk management experience, including experience assessing networking, hardware, software, information security, and vendor risks.
• CISSP, CISA, CISM, or a comparable certification is preferred.
• Familiarity with endpoint security solutions, vulnerability management tools, and security monitoring technologies.
• Basic understanding of information technology auditing procedures is required.
• Regular attendance and on-call availability are essential functions of the position.

Join a collaborative banking organization where information security is integral to protecting customers, supporting business continuity, and maintaining trust. This role offers broad organizational…