VP, Enterprise Infrastructure & Security

Apply

Description

OVERVIEW

The Vice President, Enterprise Infrastructure & Security serves as the Bank's senior technology leader responsible for the architecture, engineering, and operational integrity of enterprise infrastructure and security platforms. This role ensures stability, resilience, security, and regulatory compliance of the Bank's core technology environment supporting critical business operations, customer channels, and regulatory obligations.

This position provides executive leadership across enterprise infrastructure domains including network, server, cloud, identity, endpoint, and security technologies. The role is accountable for ensuring infrastructure platforms are designed, implemented, and operated in a secure, resilient, and highly available manner consistent with regulatory expectations established by the OCC, FFIEC, GLBA Safeguards Rule, and applicable industry standards.

As the Bank's senior engineering authority, the Vice President, Enterprise Infrastructure & Security leads infrastructure resilience, secure system architecture, disaster recovery strategy, and advanced technology operations while enabling business growth and operational continuity.

This role is responsible for the implementation, operation, and technical enforcement of enterprise infrastructure and security controls. Governance, policy ownership, enterprise risk decisions, and oversight of the Information Security Program remain under the direction of the Chief Information Security Officer (CISO).

The Vice President, Enterprise Infrastructure & Security partners closely with the CISO to ensure infrastructure and security technologies are aligned with approved policies, regulatory requirements, and the Bank's risk appetite.

ESSENTIAL DUTIES AND RESPONSIBILITES include the following.

* Lead the architecture, engineering, implementation, and lifecycle management of enterprise infrastructure platforms.

* Ensure high availability, reliability, scalability, and performance of all infrastructure systems.

* Provide Tier 3 technical leadership and escalation support for complex infrastructure issues.

* Establish and enforce engineering standards, configuration baselines, and formal change management practices.

* Implement, operate, and optimize security technologies supporting the Bank's Information Security Program.

* Ensure secure configuration and hardening of infrastructure platforms.

* Coordinate vulnerability remediation efforts in partnership with Security, IT Operations, and business stakeholders.

* Integrate security tooling across infrastructure environments to enable effective monitoring and control

* Oversee enterprise directory services, single sign-on (SSO), multi-factor authentication (MFA), and authentication platforms.

* Support privileged access management and enforce least privileged principles.

* Ensure logical access controls are aligned with infrastructure systems and security requirements.

* Oversee centralized logging, monitoring, alerting, and operational visibility platforms.

* Support incident response, investigations, and forensic analysis related to infrastructure and security events.

* Ensure infrastructure telemetry supports regulatory, audit, and operational requirements.

* Lead infrastructure resilience design, disaster recovery architecture, and backup strategies.

* Ensure recovery time objectives (RTO) and recovery point objectives (RPO) align with business and regulatory requirements.

* Participate in disaster recovery testing, exercises, and continuous improvement initiatives.

* Support internal audits, regulatory examinations, and third-party assessments.

* Maintain comprehensive infrastructure documentation, technical standards, and audit evidence.

* Partner with Risk, Compliance, and Security teams to remediate identified findings.

* Perform other duties as assigned to support bank operations.

SUPERVISORY RESPONSIBILTIES

The role may provide technical guidance, subject-matter expertise, and functional leadership to project teams, vendors, or cross-functional stakeholders, and may influence outcomes through consultation; however, such activities do not constitute managerial or supervisory…