Chief Information Security Officer

Description

The Chief
Information Security Officer is responsible for managing the information and cyber security function within the IT department of The Federal Savings Bank. This position defines strategy, plans and executes projects, oversees vendors, performs hands-on technology work, monitors and analyzes operational results of the technology environment, and responds to information security incidents. The CISO is an expert in multiple IT functions and is responsible for implementing best practices for technology architecture and IT processes.

This role is based out of The Federal Savings Bank Chicago, IL headquarters and reports directly to the Chief Information Officer.

Qualified candidates must be available to work a hybrid schedule (3 days onsite/2 days remote).

• Holidays and Paid Time Off that increases with length of employment
• Company culture that fosters work/life harmony
• Health, Dental, and Vision insurance plans
• FSA and HSA plan options
• Company-paid life insurance
• Employee Home Loan Discount
• 401k with partial match
• In-house virtual training opportunities to broaden your industry knowledge
• Career advancement
• Big bank capability with a national footprint, small-bank feel

Full Benefit Offering

• Responsible for the strategy, design and oversight of the Bank’s Information Security technology infrastructure implemented by the bank’s technology services providers
• Provide subject matter expertise for network security topics related to network, server and client technology architectures such as intrusion detection and prevention, antivirus and APT, data loss prevention, firewall, Internet proxy, VPN, etc.
• Develop documentation to support ongoing security systems operations, maintenance and specific problem resolution
• Research and review new and emerging technologies and trends
• Administer the bank’s information security technology
• Design and build a Computer Incident Response Team (CIRT) and response process for the Bank; lead the CIRT for information security incidents
• Monitor the department’s responsiveness to requests, problems and disasters and ensure that IT processes are followed

• Coordinate users, Bank IT resources, and service provider staff to implement solutions that will meet or exceed customer, management, and regulator expectations
• Manage and own project delivery within budget, scope, quality, and time requirements
• Manage information security analyst personnel, daily activities, and project delivery
• Identify and manage risk and issues throughout each information security project
• Monitor project progress, ensure deliverables are met, and communicate status to sponsors for information security projects
• Create appropriate documentation for projects include task plans, Gantt charts, resource plans, status reports, risk logs, etc.
• Develop implementation test plans and assist implementation vendors with information security applications, hardware and systems testing as needed
• Facilitate integration among different technical teams for planning and executing projects
• Develop and implement Bank Information Security policies
• Apply corporate policies to information security practices
• Lead the remediation of vulnerability assessments related to technology infrastructure
• Lead the development and implementation of Information Security controls
• Lead the review and development of information security technology standards

• Oversee hardware, software, and service selection processes for information security solutions
• Negotiate pricing with vendors
• Define departmental budget and track expenditures
• Approve all technology purchases
  
  Manage vendor services/vendor relationships to ensure delivery of products and services level targets
• Clearly communicate performance expectations of staff
• Actively seek suggestions for improvement of IT performance from IT staff and all TFSB employees
• Identify best practices and design policies and processes for the bank’s information security function
• Mentor technical staff on information security functions
• Maintain a training plan for IT staff on information security functions
• Maintain a positive work…