Chief Information Security Officer at Sunflower Bank, N.. Santa Fe, NM

Chief Information Security Officer job at Sunflower Bank, N.A.. Santa Fe, NM.
Description
Chief Information Security Officer
Santa Fe, NM
Hybrid options available.
MUST HAVE: 10 years of experience in a combination of risk management, information security, and IT jobs in a larger banking environment.
MUST HAVE: In-depth understanding of Information Security, Business Continuity Planning, Disaster Recovery Planning, IT Regulatory Requirements, Risk Assessments, Access Management, Change/Configuration Management, Governance, Problem/Incident Management, Awareness and Training Programs.
MUST HAVE: CISA, CISSP, CISM, CRISC certifications or equivalent experience and willingness to obtain and expand certifications.
MUST HAVE: 10 years of supervisory experience; including managing professional leads and groups.
Salary: Pay is dependent on knowledge, skills, abilities, experience, and location.
Sunflower Bank, N.A. is looking for a highly motivated individual to fill the position of a full-time Chief Information Security Officer at our Santa Fe, NM location. The Chief Information Security Officer (CISO) leads the Information Technology (IT) Risk and Governance functions of the company and is responsible for defining the cybersecurity strategy for the organization to manage risk, protect client data and company resources.

The IT Risk and Governance team is manages the following areas:
Information Security, Business Continuity Management, Change Management, Data Privacy, along with operational IT governance responsibilities such as Risk Assessments, external reviews and audits, regulatory compliance, and associated IT policies, procedures and documentation. The CISO is also the acting Bank Security Officer and responsible for physical security, reporting to the Bank’s Chief Risk Officer. The CISO will work with business and IT leaders to provide and maintain solutions which meet business and technical requirements by applying new and existing security technologies and solutions to solve business needs.

• Establish and maintain the enterprise vision, strategy, and program to ensure information assets, technologies, and data are protected.
• Define and administer the strategies and polices associated with Information Security and IT Compliance.
• Ensure the adequacy of security measures to protect the company’s information systems to meet business needs and satisfy regulatory requirements and guidelines.
• Provide oversight of the team performing Information Security Functions including log monitoring, threat analysis, vulnerability management, impact analysis, and recommend action or remediation plans.
• Develop training and awareness to support information security and IT Risk objectives at various levels throughout the company.
• Work closely with IT Management to ensure implementation of appropriate IT controls, processes, procedures, systems, and security technologies.
• Work closely with Enterprise Risk Management to align IT Risk and Governance with the overall company risk program.
• Participate in tactical groups, committees, teams, and other meeting as needed to facilitate the integration and recognition of IT Risk and Governance Benefits into business company objectives.
• Stay current on new developments in IT risk practices, technologies, and regulatory changes and anticipate organizational modifications.
• May be required to fulfill responsibilities specific to Response and Recovery in support of established Emergency Management, Emergency Response, Business Recovery, and Crisis Management functions.
• Responsible for supporting IT Response, Business Continuity, and Disaster Recovery processes as they pertain to the continuity of operations for the enterprise.
• Responsible for performing…