Business Information Security Officer

WSFS BankWilmington, DE
2d

About The Position

At WSFS Bank, we empower our Associates to grow their careers, guide our customers to secure their financial futures, and actively support our Communities so they can fully thrive. Careers with WSFS Bank offer an inclusive and supportive culture, competitive salaries, advancement opportunities, and more. We are the region's locally headquartered bank and wealth management company. We are honored to consistently be named a Top Workplace by our Associates, who make a difference every day for the people, businesses, and Communities we serve. We Stand For Service® is more than part of our name, it’s our mission and our purpose. The Business Information Security Officer (BISO) will play a critical leadership role in our organization, reporting directly to the Senior Vice President and Chief Information Security Officer (CISO). The Business Information Security Officer will act as second-in-command to the CISO and will serve as the strategic liaison between the bank’s business divisions and the Information Security & Technology teams. The incumbent is expected to provide continuity in leadership, decision-making, and security oversight across the bank. The BISO will receive ongoing development and exposure to enterprise security strategy, preparing them for future senior leadership responsibilities. In addition, the incumbent will ensure that security practices, risk management, and technology controls are fully aligned with business objectives. The BISO will help translate technical security requirements into practical, business-friendly guidance while championing a strong security culture across all divisions.

Requirements

  • Bachelor’s degree in information security, Information Technology, Business, or related field required; Master’s degree preferred.
  • Minimum of 10 years of experience in information security, with a proven track record of leadership in security roles.
  • Minimum of 7 years of experience in risk management, IT governance, or related fields.
  • Experience working within banking and/or financial services or other regulated industries strongly preferred.
  • Strong understanding of cybersecurity frameworks (NIST CSF, ISO 27001), regulatory requirements (GLBA, FFIEC), and risk management practices.
  • Exceptional communication skills, with the ability to explain technical concepts in business terms.
  • Demonstrated ability to build relationships, influence stakeholders, and drive alignment across diverse groups.
  • Analytical and strategic mindset with strong problem-solving capabilities.
  • Ability to manage multiple priorities and deliver in a fast-paced environment.
  • WSFS Bank will only consider candidates who are presently authorized to work for any employer in the United States and who will not require work visa sponsorship from WSFS Bank now or in the future in order to retain their authorization to work in the United States.

Nice To Haves

  • Certifications such as CISSP, CISM, CRISC, or CGEIT are a plus.

Responsibilities

  • Act as the primary point of contact between business divisions and the Information Security function.
  • Understand division-specific processes, technologies, and operating risks to proactively identify security needs and opportunities.
  • Translate security and regulatory requirements into actionable recommendations that support business goals without undue complexity.
  • Partner with business leaders to embed security considerations into strategic initiatives, vendor engagements, and product planning.
  • Support risk assessments, control reviews, and mitigation plans across assigned business areas.
  • Monitor and escalate security risks, vulnerabilities, and compliance gaps to the CISO and appropriate governance committees.
  • Support third-party risk assessments, ensuring vendor relationships meet required security standards.
  • Assist in the development and refinement of bank-wide policies, standards, and procedures.
  • Support division-specific security training, including phishing, data protection, incident response roles, and regulatory compliance.
  • Review and approve tailored learning content to make security principles understandable and actionable for non-technical audiences.
  • Champion a “security-first mindset” by reinforcing good practices and recognizing strong security behaviors within the business.
  • Support the CISO and Incident Response Team during security incidents, ensuring clear communication, coordinated action, and proper documentation.
  • Participate and support post-incident reviews and help business areas implement corrective actions.
  • Participate in tabletop exercises and business continuity planning.
  • Work closely with IT and Security Engineering to understand new technologies, roadmaps, and control capabilities.
  • Ensure business needs and constraints are considered during the design and rollout of security tools and processes.
  • Support implementation of controls such as access management, data loss prevention, endpoint protection, and logging/monitoring.
  • Participate in strategic planning sessions with the CISO and senior IT leadership.
  • Lead cross-functional projects that build visibility and leadership experience.
  • Stay current on industry trends, financial sector regulations, and emerging threats.

Benefits

  • WSFS provides a competitive benefits package, which includes medical, dental, and vision coverage; a 401(k) plan; life, accident, and disability insurance; flexible spending accounts (FSAs) and health savings accounts (HSAs); and wellness programs.
  • Additional benefits may include paid parental leave, military leave, vacation and other paid time off, sick leave in accordance with applicable state laws, and paid holidays.
  • Benefit offerings are subject to eligibility requirements, legal limitations, and may vary based on an Associate’s location and employment status.
  • For more information about Associate benefits, please visit https://www.wsfsbank.com/about/careers/
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service