VP InfoSec Officer

We are seeking an experienced Vice President, Information Security Officer to oversee Bridgewater Bank's information security, business continuity, incident response, and third-party risk programs. The role will report to the Chief Risk Officer and ensure alignment with the Bank's Enterprise Risk Management program, regulatory expectations, and strategic growth. The Information Security Officer will be expected to collaborate with leaders across all business lines and lines of defense to identify, assess, monitor, report, and mitigate information and cybersecurity risks.

RESPONSIBILITIES:

• Partner with the Chief Risk Officer and the Chief Technology Officer to continuously strengthen the governance and oversight of the Bank’s information security, business continuity, and third-party risk programs
• Facilitate a culture of continuous improvement by creating information security risk assessments, determining the effectiveness of IT security controls, and proposing scalable enhancements when potential gaps exist.
• Coordinate with business leaders to ensure proper data governance and cybersecurity controls are created and maintained, including oversight of infrastructure and application security, vulnerability management, access management, and cybersecurity and fraud resiliency.
• Manage the incident response plan to ensure appropriate preparation, detection, response, and recovery of potential incidents and ensure proper communication to applicable stakeholders.
• Provide oversight of data governance, record retention, and privacy laws as they relate to information and cybersecurity.
• Oversee the third-party risk reviews related to information security and business continuity planning, including SOC reviews and vendor assessments.
• Develop monitoring tools and key risk indicators related to the effectiveness of the information security program and the readiness of the business continuity programs that can be reported to Senior Management and the Board.
• Administer the Bank’s information security awareness and training program.
• Serve as a primary information security liaison for regulatory examinations and independent audits, and ensure the maintenance of proper documentation for any related requests.

QUALIFICATIONS:

• Bachelor's degree in information security, technology, finance, or another business-related field.
• 7+ years of information security, cybersecurity, technology, or IT audit experience in banking, financial services, or another regulated industry.
• Experience with meaningful ownership or oversight of an information security program, risk assessments, control design, and assurance monitoring.
• Working knowledge of technology platforms, identity and access management, data protection, vulnerability management, security operations, incident response, and cyber resilience.
• Ability to evaluate risk materiality, form evidence-based conclusions, and translate technical security issues into clear business and risk recommendations.
• Demonstrated ability to present cybersecurity and technology risk matters to Boards, executive management, committees, and both technical and non-technical audiences.
• Proven ability to build effective relationships across business lines and lines of defense, influence without relying on hierarchy, and drive sustainable remediation.
• Experience with regulators or external auditors on information security or cybersecurity matters
• Excellent verbal, written, and interpersonal communication skills, with strong attention to detail, critical thinking, accuracy, prioritization, and follow-through.
• CISSP, CISA, CISM, CRISC, or equivalent certification.

ABOUT BRIDGEWATER BANK:

Picture yourself at one of the Twin Cities’ best places to work, surrounded by people who challenge you, support you, and…