VP, Lead Security Risk Analyst

BANC OF CALIFORNIA AND YOUR CAREER

Banc of California, Inc. (NYSE: BANC) is a bank holding company with over $34 billion in assets and the parent company of Banc of California. Banc of California is one of the nation’s premier relationship‑based business banks, providing banking and treasury management services to small, middle‑market, and venture‑backed businesses. As the largest independent bank headquartered in California, the bank offers a broad range of loan and deposit products and services through a network of full‑service branches and regional offices, as well as through digital and nationwide capabilities.

The bank also provides full‑service payment processing solutions to its clients and serves the Community Association Management industry nationwide through its technology‑forward platform, Smart Street. Banc of California is committed to supporting its local communities through the Banc of California Charitable Foundation and by partnering with organizations that promote financial literacy, job training, small business support, affordable housing, and more.

At Banc of California, our success is powered by our people and a shared commitment to delivering meaningful results. We foster an environment where entrepreneurial thinking is encouraged, and accountability and operational excellence are expected. Our team members are empowered to take ownership, make informed decisions, and make a meaningful impact as the bank continues to grow and evolve. We are dedicated to supporting your growth and wellbeing through comprehensive benefits, robust development opportunities, and inclusive programs that enable you to perform at your best.

Together we win!

The VP, Lead Security Risk Analyst leads enterprise‑wide Information Security risk engagement across corporate initiatives, embedding security‑by‑design principles into business and technology decisions. This role drives the development and execution of the Information Security risk and GRC programs, conducting complex, high‑impact risk assessments across enterprise architecture, cloud, AI/ML, and third‑party environments. Serving as a senior advisor, the position partners with leadership, architects, and engineering teams to translate regulatory and security requirements into actionable architectural controls and secure design standards.

The VP, Lead Security Risk Analyst also drives cross‑functional remediation efforts to ensure risks are effectively managed in alignment with the organization’s risk appetite. Performs all duties in accordance with the Company’s policies and procedures, all U.S. state and federal laws and regulations, wherein the Company operates.

• Lead enterprise Information Security engagement across all enterprise‑wide corporate projects, championing security‑by‑design principles, influencing security decisions without direct authority, and driving alignment across multiple business and technology domains.
• Contribute to the development, management, and ongoing improvement of the Information Security risk program, compliance initiatives, and overall security risk posture.
• Partner with senior management to design and implement maturity strategies and operations into the Information Security GRC team.
• Maintain Information Security risk register, report monthly to appropriately address key risk areas.
• Support policies and procedures maintenance aligned with in‑scope security frameworks, regulations, and internal standards to manage identified risk effectively.
• Conduct regular risk assessments to identify potential threats and vulnerabilities across the organization, analyzing their impact and likelihood of occurrence.
• Generate reports on risk assessments, compliance status, and control effectiveness to communicate findings to stakeholders at various levels within the organization.
• Lead and deliver enterprise and domain risk assessments (at least annually, or event‑driven) using consistent methodology that complies with regulatory requirements.
• Conduct and lead the bank’s most complex and high‑impact risk assessments, including those involving enterprise architecture, modernization…