Vice President - Information Security Risk

Vice President – Information Security Risk

Join to apply for the Vice President – Information Security Risk role at Randolph Brooks Federal Credit Union

Randolph‑Brooks Federal Credit Union (RBFCU) is the largest credit union in Texas with more than 1 million members and total assets exceeding $15 billion.

Recognized for financial stability, our credit union consistently receives the highest ratings of “Five Star” and “Superior” from respected organizations that evaluate financial institutions in the United States. We’re frequently recognized as one of the best workplaces in San Antonio, Austin, the state of Texas and the country.

The Vice President – Information Security Risk will provide key leadership in identifying, assessing, and managing information technology/security risk across the Credit Union ensuring the risk exposure is aligned to strategic objectives, risk profile, and regulator expectations. In addition, the Vice President will collaborate with senior management, business units, and regulators to develop and implement effective risk management frameworks, policies, and practices.

This includes establishing a second line of defense information technology / security risk oversight program to identify, measure, monitor, and report related risks along with the overall effectiveness of the Credit Union’s Information Security Program.

• Develop and establish a second line of defense information technology/security risk framework and oversight program to oversee IT/security activities across the enterprise.
• Develop, establish, and enforce IT/security risk standards; measure and report on adherence to defined standards.
• Perform oversight activities such as risk reviews, risk assessments, control monitoring, and validation testing to identify IT/security risks or non‑compliance with policies, program procedures and standards, applicable laws, rules or regulations.
• Engage with key stakeholders to develop proactive risk mitigation strategies for areas of non‑compliance or increased risk; review and validate mitigation plans to ensure identified risk is mitigated to an acceptable level.
• Develop and maintain key metrics to monitor and oversee IT/security risks in accordance with the Credit Union’s Risk Appetite; report results to management, senior leadership, and applicable risk or Board‑level committees.
• Collaborate with the Enterprise Risk Management (ERM) function to ensure integration and reporting of IT/security risks within the ERM program.
• Monitor industry trends and emerging risks to inform or recommend enhancements to the information security program accordingly.
• Collaborate with senior management and business units to establish a culture of information security by actively promoting security awareness and shared responsibility.
• Actively seek regular discussions with key stakeholders to provide risk guidance, consultation, and credible challenge for implementations or changes in IT/security activities.
• Serve as liaison and support during internal/external audits or regulatory examinations of the information security program.
• Consistently model conflict resolution, tact, and negotiation skills through appropriate persuasion and genuine empathy throughout all interactions.
• Coach and train direct reports in IT/security risk identification, risk analysis, risk measurement, control development & testing; also provide mentoring and professional development opportunities to direct reports.
• All other duties as assigned (essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).

• Bachelor’s Degree (Information Systems, Cybersecurity, Computer Science, Business preferred).
• Minimum 5 years of information technology, cybersecurity, governance, risk management or other related work experience OR 10 years of related work experience in lieu of a degree (experience within financial institutions or other regulated industry is a plus).
• Minimum 5 years of management experience.
• Comprehensive knowledge and experience in applying IT and Information Security standards and governance frameworks (NIST CSF, CIS…