Bank Information Security Officer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time San Antonio, TX, US

Job Description

Job Title:Bank Information Security Officer (BISO)

Preference is for a candidate based in or near our San Antonio headquarters; remote candidates will be considered for this role.

Summary:The Bank Information Security Officer (BISO) supports the Chief Technology Officer, who serves as the bank's designated Information Security Officer (ISO), in the day-to-day management and execution of the bank's Information Security Program. This role bridges strategic security direction and hands-on operational execution, overseeing security monitoring, IS incident response, and risk assessments, and directly supervising the Information Security Analyst, while ensuring the bank's information security practices align with regulatory expectations, including the GLBA Safeguards Rule (16 CFR 314) and FFIEC Information Security guidance.

To perform this job successfully, an individual must be able to perform each of the essential duties satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Manage the day-to-day operations of the bank's Information Security Program on behalf of the Chief Technology Officer / Information Security Officer.
• Identify, assess, and manage information security risks; ensure ongoing security monitoring and IS incident response readiness.
• Develop, maintain, and enforce information security policies, procedures, standards, and employee training/awareness programs.
• Evaluate, recommend, and help implement security technologies and controls to safeguard information assets.
• Coordinate information security assessments and reviews with IT, Compliance, Internal Audit, and external examiners/auditors.
• Lead IS incident response activities, including investigation, containment, remediation, and post-incident reporting.
• Monitor the regulatory and threat landscape and advise the Chief Technology Officer on emerging security threats, trends, vulnerabilities, and regulatory changes.
• Maintain the bank's information security risk register, control testing, and remediation tracking.
• Supervise and develop the Information Security Analyst, providing guidance, performance management, and professional development.
• Prepare metrics, dashboards, and reports on the information security program for the Chief Technology Officer, senior management, and the Board as needed.
• Serve as a backup point of contact for information security matters in the Chief Technology Officer's absence.
• Carries out responsibilities in a manner consistent with our values and operating principles, in accordance with policy and applicable laws, and with a commitment to continuous improvement and process excellence.
• Any other duties as assigned.
• Day-to-day execution of a compliant Information Security Program.
• Timely IS incident detection, response, and remediation.
• Accurate and up-to-date information security risk register and control testing.
• Development and performance management of the Information Security Analyst.

Organizational Structure:

Reports to:Chief Technology Officer

Supervises:Information Security Analyst

Qualifications:

Education:

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field preferred.

Experience:

• 5+ years of experience in information security, with demonstrated experience in security operations, risk assessment, or GRC.
• 2+ years of experience with supervisory or team-lead responsibilities preferred.
• Experience in financial services or a highly regulated industry preferred.

Required…