AVP Information Security Operations

AVP Information Security Operations

Job Details
Job Location North Haven HQ – North Haven, CT
Position Type Full Time
Salary Range $ – $ Salary/year

Description Are you looking to have a positive impact on people in your community? Connex Credit Union is looking for diverse talent who are motivated to improve the financial well‑being of others. We’re a company with a long and successful history where trust is important and exceptional customer service is the standard. We are committed to our employees, our members and the communities we serve.

If you want to make a difference and be part of a growing, inclusive organization, join us in our mission.

• Competitive compensation.
• Medical, Dental and Vision coverage.
• Paid time off.
• 401K contributory plan with company match.
• The opportunity to become involved in community outreach.

Qualifications The Assistant Vice President of Information Security Operations is a hands‑on leadership role that is responsible for the design, performance, planning, budgeting, securing, monitoring, and integration of Cybersecurity initiatives across Connex. You will play a crucial role in refining and creating processes related to the Risk Management Framework (RMF), threat/vulnerability analysis, penetration testing, and reporting exercises. Your primary objective is to enhance Connex’s cybersecurity capabilities and incident threat response processes to ensure they meet company requirements and industry standards.

As the AVP of Information Security Operations, you will be responsible for safeguarding the organization’s information systems and data assets. You will play a key role in implementing and maintaining security measures to protect against cyber threats, ensuring the confidentiality, integrity, and availability of their systems.

Essential Functions and Responsibilities Includes the following and other duties may be assigned.

• Deliver on cybersecurity initiatives at the credit union. Coordinates with internal teams and external vendors to ensure the cybersecurity resilience of the credit union is tested frequently.
• Oversees audits and evaluations of the cybersecurity environment. Manages the planning, documentation, testing, integration, and execution of cybersecurity projects including annual budgeting and coordination of vendor responsibilities.
• Stays informed about the latest security threats, technologies, trends and best practices.
• Security Policies:
  Establish and enforce security policies, procedures, and guidelines to protect digital assets, sensitive trade data, and intellectual property. Design and implement security controls for networks, systems, and applications.
• Risk Management:
  
  Assist in the development and maintenance of our Risk Management Framework (RMF) processes and documentation. Conduct regular risk assessments, vulnerability assessments and scans, and penetration tests on our infrastructure, applications, and networks to identify and address potential risks and develop risk mitigation plans to safeguard the organization against cyber threats and vulnerabilities. Be responsible for the business fraud investigation and mitigation.
  
  Analyze security controls and provide recommendations for improvements.
• Incident Response:
  Proactively search for threats and vulnerabilities within our environment. Conduct incident handling and coordination, ensuring a rapid and effective response to security events. Create and maintain an effective incident response plan, ensuring timely and efficient recovery from security breaches and disruptions. Monitor security logs and respond to security incidents in a timely manner and defend our systems against cyber threats.
• Incident Investigation and Forensics:
  Carry out thorough research and investigation on security incidents. Work with internal teams and external vendors to conduct research and forensics. Provide incident detection, analysis, and response, helping to improve our overall security posture.
• Regulatory Compliance:
  Ensure compliance with all related regulatory bodies. Ensure that all cybersecurity activities are conducted in accordance and compliance with all regulatory and government policies, standards, and…