Principal Information Security Engineer

About This Role

The Principal Information Security Engineer is a highly influential, senior individual contributor who serves as the primary technical authority and strategic partner to Information Security leadership. This role plays a critical part in shaping, advancing, and operationalizing the enterprise security program—bridging strategy, risk, and execution across the organization.

As a trusted advisor and hands‑on technical leader, you will design and drive scalable security solutions, guide complex initiatives, and strengthen the bank's security posture in a highly regulated environment. Success in this role is defined by technical excellence, influence, execution, and program maturity—not by formal people management.

• Act as the principal technical lead for the enterprise Information Security program
• Translate security strategy, risk decisions, and regulatory requirements into practical, repeatable technical solutions
• Provide technical leadership and prioritization across security initiatives and engineering efforts
• Serve as the primary escalation point for complex security engineering and architectural decisions
• Design, implement, and support security technologies including network security, vulnerability management, IAM, encryption, logging, and privileged access
• Embed security best practices into system design, infrastructure changes, and application implementations
• Partner with IT and business teams to assess risk and securely enable new technologies and integrations
• Support audits, regulatory exams, and security assessments through evidence collection and remediation planning
• Monitor security events and privileged activity; assist with incident response and investigation
• Mentor and guide team members through technical expertise, peer review, and knowledge sharing
• Contribute to the development and improvement of security policies, standards, and procedures
• Maintain awareness of emerging threats, security frameworks, and banking regulations

• Bachelor’s degree in a technical or business‑related field, or equivalent experience
• 7+ years of progressive experience in information security, security engineering, or related technical roles
• Proven ability to lead through influence, expertise, and collaboration without formal authority

• Security+ required
• CISSP, CISM, GIAC, or comparable advanced certifications strongly preferred

• Deep understanding of security architecture, risk management, and defense‑in‑depth principles
• Experience with network security, IAM, endpoint security, vulnerability management, and logging/SIEM
• Knowledge of secure system design, threat modeling, and security testing practices
• Familiarity with regulatory and compliance frameworks applicable to banking and financial services

• Strong analytical and problem‑solving skills
• Ability to communicate complex technical concepts to technical and non‑technical audiences
• High degree of accountability, judgment, and discretion
• Ability to prioritize and execute in a fast‑paced, regulated environment
• Collaborative mindset with the confidence to challenge and influence decisions constructively

Be a part of a growing company that is truly committed to its employees and clients. Consider joining the First Bank family. As a member of our family, you are part of one of the largest independent banks in the U.S. We are proud of our growth and success over the past 100 years and look forward to a bright and promising future.

At First Bank one of our biggest strengths is the diversity of our people. Our mission is to capitalize on the diversity of our associates and promote personal and professional development throughout every area of the organization. We encourage diversity by actively seeking employees from various backgrounds, walks of life, and job skills. We strongly encourage you to apply whenever a First Bank job opportunity interests you.

First Bank is a VEVRAA Federal Contractor and an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for…