Chief Information Risk Officer

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success.

We build long-lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).

Headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano and San Antonio, Texas Capital was recently named Best Regional Bank in 2024 by Bankrate and was named to ’ Dallas-Fort Worth metroplex Top Workplaces 2023 and Go Banking Rate ’s 2023 list of Best Regional Banks. For more information about joining our team, please visit us at .

Brief Overview of Position

The Chief Information Risk Officer (CIRO) is responsible for the development, implementation, and management of the information risk strategy. Reporting to the Chief Risk Officer, the CIRO oversees and provides effective challenge to the first line of defense CISO organization and provides independent reporting to the Board of Directors for cybersecurity, data privacy, risk management, and regulatory compliance. The CIRO will work closely with other executive leaders to ensure information risk initiatives align with business goals while safeguarding the organization from internal and external threats.

• Develop and implement a comprehensive information risk strategy and written information security program that includes information, and cyber security.
• Collaborate with executive leadership to align information risk goals with the organization’s strategic objectives.
• Report key risks and metrics to the Board of Directors and the Enterprise Risk Committee.
• Oversee and challenge the first line implementation of cybersecurity policies, procedures, cloud security posture and technologies.
• Provide independent and effective challenge to first line of defense cyber security to ensure the protection of IT infrastructure, networks, and sensitive data from cyber threats, breaches, and attacks.
• Manage the identification, monitoring, and response to potential security incidents.
• Identify and assess security risks, vulnerabilities, and potential threats across the organization.
• Ensure compliance with relevant laws, regulations, and industry standards.
• Develop audit processes and oversee external audits or assessments.
• Deliver annual assessments of the information security program and maturity rating.
• Assess and challenge the use of artificial intelligence (AI) and machine learning technologies within the organization, ensuring appropriate security controls, bias mitigation, and compliance with emerging AI regulations.
• Monitor and respond to AI-driven security threats, including adversarial AI attacks, deepfake fraud, and automated phishing campaigns, developing policies and countermeasures to protect the organization against evolving AI-enabled risks.
• Develop and implement plans for incident management, disaster recovery, and business continuity in the event of security breaches.
• Lead initiatives to protect personal, customer, and organizational data.
• Implement strategies to mitigate risks related to data breaches and unauthorized access to sensitive information.
• Design and implement security awareness programs for employees, including training on recognizing potential threats (e.g., phishing, social engineering).
• Foster a culture of security within the organization to encourage proactive risk…