Vice President, Cybersecurity - REMOTE

Why You'll Love Working at Quorum

At Quorum Federal Credit Union, we are a cutting-edge credit union that operates as a technology company, delivering innovative financial solutions to our members. As a remote organization, we thrive on collaboration and recognize outstanding performance. We are the ideal workplace for self-motivated individuals who are committed to organizational success and eager to join a dynamic team of professionals. We stand out as a best-in-class employer, offering a unique and supportive work environment that fosters personal and professional growth.

Our culture is built on valuing teamwork, recognizing achievements, and providing the tools and resources needed to excel. If you are looking for a place where you can make a meaningful impact, enjoy a flexible and fulfilling work experience, and be part of a forward-thinking team, Quorum Federal Credit Union is the perfect fit for you.

The Vice President of Cybersecurity serves as the senior cybersecurity leader for the credit union and reports directly to the COO. This role leads the enterprise cybersecurity program as a standalone risk function, with responsibility for strategy, governance, cyber risk oversight, regulatory engagement, and executive-level reporting, while remaining separate from daily technology delivery.

• Develop and lead the enterprise cybersecurity strategy, roadmap, policies, and governance structure in alignment with the credit union's risk appetite and business objectives.
• Oversee information security risk management, including risk assessments, control maturity, issue remediation tracking, and alignment to regulatory expectations.
• Establish and oversee an enterprise cybersecurity assessment and assurance program, including periodic internal security assessments, independent third-party assessments, penetration testing, vulnerability assessments, and security maturity reviews. Findings should be prioritized, tracked through remediation, and regularly reported to executive leadership.
• Lead security-related regulatory, audit, and board reporting, including updates on cybersecurity posture, incidents, third-party exposure, and emerging threats.
• Establish and oversee the credit union's third-party cybersecurity risk program, including due diligence standards, control reviews, contract security provisions, and ongoing monitoring.
• Provide executive oversight for IAM, cloud, and security architecture standards.
• Own cybersecurity incident response leadership at the executive level, including escalation management, tabletop exercises, post-incident reporting, and lessons learned.
• Lead Business Continuity, Disaster Recovery, and Cyber Resilience planning.
• Lead AI and data governance efforts related to cybersecurity, including secure use of AI tools, model oversight coordination, data protection controls, and governance expectations.
• Partner with Digital Delivery, Infrastructure, Risk, Compliance, Internal Audit, Legal, and business leaders while maintaining independent cybersecurity oversight.
• Supervise the Security Operations Manager and ensure effective day-to-day execution of operational security activities.

• Bachelor's degree in cybersecurity, information systems, computer science, business, or a related field; advanced degree preferred.
• 10 or more years of progressive cybersecurity experience, including senior leadership responsibility in financial services or another regulated industry.
• Demonstrated experience with security strategy, governance, incident response, identity, cloud security, third-party risk, and board/regulatory reporting.
• Strong working knowledge of financial services control expectations and frameworks such as FFIEC, GLBA, NIST, and related regulatory guidance.
• Proven ability to communicate technical risk in clear business terms to executive leadership and boards.
• Relevant certifications preferred, such as CISSP, CISM, CRISC, or equivalent.

• Executive presence and board-ready communication style.
• Business-oriented leadership mindset with strong risk judgment.
• Ability to balance strategic oversight with practical…