Associate Director, Information Security

First Command Financial Services, Inc.•Fort Worth, TX

3d•Hybrid

About The Position

Reporting to the Director, Information Security & Data Privacy, this role is responsible for leading the execution, and continuous improvement of Information Security Operations across First Command Financial Services. The Associate Director will oversee day-to-day operational security capabilities that protect the organization, support regulatory and audit expectations, and improve the effectiveness of security controls. This role partners closely with IT leadership, Infrastructure, Risk, Legal, Compliance, and business stakeholders to ensure security operations are reliable, measurable, and aligned to enterprise priorities. Key areas of focus include, operational control execution, reporting, audit response, process maturity, and team leadership.

Requirements

Bachelor’s degree preferred
5+ years of relevant work experience in information security operations, cybersecurity, technology risk, infrastructure security, or related IT functions.
Experience leading operational security capabilities such as security monitoring, vulnerability management, incident response coordination, threat management, access/security control operations, or security tooling support.
Experience supporting audit, regulatory, compliance, or risk management activities in a financial services, banking, or similarly regulated environment.
Experience in project, program, or operational management, including prioritization, resource coordination, reporting, and stakeholder communication.
A minimum of 3 years’ leadership experience managing teams, vendors, operational processes, or cross-functional security initiatives.
Information security, cybersecurity, risk, or technology certification preferred, such as CISSP, CISM, CISA, CRISC, Security+, GIAC, or equivalent experience.
Strong understanding of information security operations, security controls, incident response processes, vulnerability management, threat management, and operational risk reduction.
Ability to translate technical security issues into business risks, priorities, action plans, and executive-level updates.
Experience developing and maintaining operating procedures, playbooks, evidence packages, metrics, dashboards, and status reporting.
Demonstrated ability to coordinate across technical teams, business stakeholders, vendors, audit, compliance, and risk partners to drive timely outcomes.
Strong analytical, problem-solving, prioritization, and decision-making skills in a timeline-driven operational environment.
Passion for well-organized documentation, repeatable processes, measurable controls, and operational accountability.
Ability to manage multiple operational and project priorities, including staffing considerations, planning, resource allocation, timelines, and production support demands.
Excellent communication skills for setting expectations, clarifying assignments, escalating risks, and keeping team members and stakeholders focused on priorities.
Demonstrated ability to manage, coach, and develop a highly technical and diverse team while fostering collaboration, accountability, and continuous growth.

Responsibilities

Lead and mature the Information Security Operations function, including execution, reporting, and continuous improvement.
Oversee daily security operations activities, including monitoring, triage coordination, escalation processes, control execution, and operational readiness.
Partner with Infrastructure, Risk, Legal, Compliance, and business teams to ensure security controls are implemented, operating effectively, and aligned to enterprise risk priorities.
Coordinate vulnerability management, threat response, incident readiness, remediation tracking, and operational follow-up across technology and business teams.
Develop and ensure the consistent maintenance of operational procedures, playbooks, process documentation, metrics, dashboards, and leadership reporting for security operations.
Support audit, regulatory, and risk management activities by providing evidence, control narratives, remediation status, and operational reporting.
Drive operational improvements that reduce risk, increase response effectiveness, strengthen accountability, and improve visibility into security posture.
Manage security operations priorities, resource needs, project dependencies, and production support demands without jeopardizing critical operational work.
Collaborate with project managers and technology leaders to align security operations requirements with enterprise initiatives and implementation timelines.
Supervise employees in the area of responsibility, provide daily work direction and project assignments, and monitor progress against scheduled tasks.
Measure team and program effectiveness through agreed-upon operational metrics, service levels, risk indicators, and control performance measures.