Information Security Officer Job Los Angeles area,California USA,IT/Tech

Location:

Los Angeles, California (please note this is a full-time in office position)
Why Join Us:

Position with opportunity to lead and improve the information security program for an established and successful consumer / community banking organization
Highly visible role with direct exposure to executive management, the Board of Directors, and regulators
Culture built on valuing empowerment and achieving goals through a superior customer experience

Responsibilities:

Reporting to the Chief Risk Officer, this position will be responsible for developing, implementing, and maintaining the bank’s information security program, strategy, and governance framework
Develop and continuously enhance the Information Security Strategy, Architecture, and Roadmap to align with business objectives, risk appetite, and regulatory requirements
Establish and maintain enterprise-wide information security policies, standards, procedures, and controls
Hands‑on review and administration of the security environment, including firewall rules, system configurations, and security appliances and tools, working alongside managed security service providers
Develop and oversee the enterprise‑wide information security risk assessment process, identifying threats, assessing the sufficiency of controls, prioritizing residual risks, and tracking remediation to completion
Oversee key control processes including identity and access management, privileged access, data loss prevention, encryption, vulnerability and patch management, secure configuration, logging, and monitoring
Direct cybersecurity incident preparedness, detection, response, investigation, recovery, and post‑incident remediation, including required notifications to regulators and other stakeholders
Lead cyber resilience programs in coordination with the bank’s business continuity management program
Oversee information security risk associated with third parties, service providers, and cloud environments
Serve as the primary liaison with internal and external auditors, regulators, and independent assessors
Ensure compliance with applicable laws, regulations, and guidance, including GLBA, FFIEC guidance, and California privacy and breach‑notification requirements
Report periodically to executive management and the Board of Directors on the bank’s risk profile, material threats, significant incidents, control effectiveness, and remediation status
Develop and promote enterprise‑wide security awareness and training programs, and manage one direct report

Requirements:

This position is based on-site in Los Angeles five days per week
You must have substantial information security experience, including banking or financial services experience and direct involvement in regulatory examinations (ideally with the FRB and DFPI)
Strong hands‑on technical skills, with working knowledge of NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, and cloud security
Experience performing information security risk assessments, including GLBA
Ability to present to the Board of Directors and interact with regulators; ideally you will have previously served as an Information Security Officer
Bachelor’s degree in a related field; CISSP, CISM, CISA, CRISC, or equivalent certification preferred