Information Security Officer

At Richwood Bank, our purpose is to inspire, protect, and celebrate anything that makes communities thrive.

Have you ever wanted to work for a company that exceptionally lives its values? One hundred and fifty years ago, we began as a small community bank. Today, we are still a community bank – as well as a payroll processing team, a marketing agency, a coffee shop, and more. We have flipped the switch on traditional banking. Yet, we have always aimed to provide the very best customer experience, contribute to the greater good of our local communities, and make every effort to be the best employer in the area with a company culture that works hard to develop, recognize, and award its team members.

Richwood Bank has a comprehensive benefits package for full-time employees including, but not limited to, medical and wellness program, dental, vision, employee assistance plan, life insurance and supplemental short-term disability. Full time and part time employees have access to a 401(k) plan, an enhanced Wellness program, tuition reimbursement, and tons of professional development opportunities!

The Information Security Officer (ISO) leads Richwood Bank's information security program to protect customer and employee information, maintain the confidentiality, integrity and availability of bank systems, and support secure banking operations. The ISO combines program leadership with practical oversight of security operations, risk management, policies, architecture and employee awareness.

This role directs assigned security personnel and coordinates managed security providers, incident response partners and virtual CISO resources, as applicable. The ISO works closely with systems and network teams, Compliance, Risk Management, Human Resources and business leaders to implement appropriate safeguards and communicate security priorities in business terms.

Richwood Bank prides itself on a unique culture and all team members should be active and engaged participants.

• Develop, maintain and measure a risk-based information security program aligned with the bank's business objectives, risk appetite and applicable requirements.
• Maintain security architecture, standards and control baselines in partnership with systems, network and application owners; incorporate security into technology projects and changes.
• Create and maintain information security policies, standards, guidelines and procedures; coordinate approval, communication, periodic review and documented exceptions.
• Lead information security risk assessments, maintain a risk register, and recommend prioritized remediation plans with accountable owners and target dates.
• Develop and maintain the security awareness program, including onboarding, recurring training, phishing exercises and role‑specific education.
• Partner with business continuity and IT recovery owners to maintain and test business continuity and disaster recovery plans, with emphasis on cyber incidents, data restoration and critical banking services.

• Provide clear reporting to senior management, the IT Steering Committee and the board or designated board committee on security risks, incidents, control effectiveness and remediation progress.
• Maintain a documented escalation path for significant risks and unresolved findings, including direct access to the designated executive or board committee when needed for independent escalation.
• Recommend security priorities, staffing, training and budget needs; present risk treatment options and obtain documented risk acceptance from authorized management.

• Maintain awareness of emerging threats, attack methods, security technologies and financial services risks; recommend practical improvements appropriate to the bank's size and complexity.
• Evaluate and recommend security solutions and enhancements through approved procurement and vendor management processes, considering effectiveness, integration, support and total cost.
• Oversee deployment, integration, configuration and validation of security solutions in coordination with IT teams and service providers.
• Review new systems, cloud services, digital banking integrations, automation and AI use cases for security and data protection risks before implementation.

• Oversee monitoring and protection of endpoints, servers, networks, cloud services, email, identities and data repositories…