Chief Information Officer

FFB Bank•Fresno, CA

13h

About The Position

The Chief Information Officer (CIO) provides leadership, governance, and management oversight of FFB Bank’s technology environment, including IT operations, infrastructure, cybersecurity coordination, digital banking systems, enterprise applications, data governance, technology risk management, business continuity, disaster recovery, third-party technology relationships, and technology support. Reporting directly to the COO, the CIO leads technology operations, services, and governance and partners with business leaders to align technology investments with the Bank’s strategic objectives, operational efficiency, customer experience, regulatory compliance, growth, and risk management programs. The CIO develops and executes a comprehensive technology strategy that enables responsible innovation while maintaining a strong control environment consistent with regulatory expectations and the Bank’s risk appetite. The role is accountable for the availability, resiliency, scalability, security, and cost-effectiveness of technology capabilities and for protecting the confidentiality, integrity, and availability of Bank and customer information. The CIO advises executive management and the Board of Directors, directs technology infrastructure and services, oversees cybersecurity and technology risk controls, and serves as the primary management liaison for technology-related examinations, audits, and assessments. The role also oversees critical technology vendors, recovery and resilience capabilities, data governance, and standards for artificial intelligence, automation, analytics, and emerging technologies. The CIO manages technology budgets, plans, metrics, and personnel, and leads, coaches, and develops the technology team. The position involves work in an office or home office environment and travel of up to 10%, typically regional or local, for company meetings, training sessions, and corporate events. Physical activities include sitting, walking, reaching, writing, typing, speaking, lifting moderate weights, and operating office equipment. Reasonable accommodation may be made for individuals with disabilities to perform essential functions. The role requires regular and reliable attendance and adherence to Bank policies, applicable laws and regulations, confidentiality and data privacy requirements, and AML/CFT responsibilities specific to the role.

Requirements

At least 10 years of progressively responsible technology experience, including at least 5 years in a senior leadership role with enterprise-wide responsibility.
Excellent organizational and time management skills, with ability to provide leadership, delegation, motivation, problem resolution, and training for 4 or more employees using positive supervisory techniques.
Ability to establish performance standards, measure outcomes, take corrective action, and appropriately reward employees.
Comprehensive knowledge of management procedures and ability to plan department activities, develop strategies, and create policies and procedures.
Proficiency with Microsoft Office Suite, including Excel, Word, and Outlook.
Effective oral, written, and interpersonal communication skills, including ability to interpret documents and procedures, write reports and correspondence, and communicate clearly with customers, vendors, and employees.
Strong teamwork and relationship skills, including ability to lead collaborative efforts, foster alignment, and drive results.
Ability to take initiative and effect change through consensus building, negotiation, and conflict resolution.
Commitment to continuous learning and professional development for self and team members to stay current with industry standards and best practices.
Ability to maintain authenticity and integrity in professional interactions and build trust and credibility with team members, customers, and direct reports.
Willingness to take on special projects and other duties beyond core responsibilities to support team and organizational needs.
Ability to manage multiple priorities and meet deadlines in a dynamic environment.
Ability to adapt to changing priorities and procedures.
Current driver’s license and a vehicle with appropriate insurance coverage if required to drive while performing assigned duties and responsibilities.

Nice To Haves

Bachelor’s degree from an accredited college or university in a relevant field such as Information Technology, Computer Science, Cybersecurity, Business, or a related field is preferred.
Professional certifications such as CISSP, CISM, CRISC, CISA, CGEIT, PMP, or comparable technology, security, risk, governance, or project management credentials are preferred but not required.
Financial institution experience is strongly preferred, including experience with banking platforms, digital banking, payments, regulatory examinations, technology risk, cybersecurity, vendor management, and major system implementations.

Responsibilities

Develop and execute the Bank’s technology strategy, multi-year roadmap, annual operating plan, and investment priorities in alignment with the strategic plan and risk appetite.
Advise executive management and the Board of Directors on technology strategy, cybersecurity, operational resilience, digital transformation, emerging risks, and significant technology investments.
Lead technology modernization, digital transformation, and technology partnership initiatives aligned with business objectives and regulatory expectations.
Evaluate emerging technologies, market developments, and banking industry trends for opportunities to improve client experience, employee productivity, operational efficiency, scalability, and competitive positioning.
Establish technology portfolio governance, business use standards, project prioritization, and benefit-realization practices.
Direct technology infrastructure, networks, cloud services, telecommunications, enterprise applications, end-user computing, and technology support services.
Maintain enterprise architecture and technology standards supporting secure integration, scalability, reliability, interoperability, and lifecycle management.
Ensure systems and support services meet performance, availability, capacity, recovery, response, resolution, and service-level objectives.
Oversee technology service management, including incident, problem, change, release, configuration, asset, patch, and vulnerability management.
Establish and monitor support intake, prioritization, escalation, root-cause follow-up, user communication, and service-performance reporting.
Identify and address technical debt, unsupported systems, single points of failure, and technology concentration or resiliency risks.
Partner with Enterprise Risk and control stakeholders to maintain an effective, risk-based information security and cybersecurity program.
Ensure administrative, technical, and physical safeguards protect confidential and sensitive Bank, customer, and employee information.
Manage security architecture, identity and access management, vulnerability remediation, threat detection, logging, incident response, and secure configuration practices.
Coordinate technology responses to cybersecurity incidents and significant operational disruptions, including communication, containment, recovery, and lessons learned.
Establish and maintain a technology risk management and control framework consistent with applicable requirements and the Bank’s enterprise risk management program.
Ensure technology controls are designed, documented, implemented, tested, monitored, and remediated appropriately.
Serve as the primary management liaison for technology-related regulatory examinations, internal and external audits, and independent assessments.
Ensure timely and sustainable remediation of examination findings, audit issues, risk acceptances, control deficiencies, and management action plans.
Maintain current technology policies, standards, procedures, inventories, diagrams, and governance records.
Own the lifecycle management of critical technology vendors, including due diligence facilitation with ERM, selection, contracting, implementation, monitoring, performance management, escalation, renewal, transition, and termination.
Participate in negotiations for material technology and cybersecurity agreements, addressing service levels, security, audit rights, regulatory access, resilience, subcontractors, data ownership, transition assistance, and concentration risk.
Ensure fintech partnerships and outsourced technology arrangements meet contractual obligations and approved governance, risk, compliance, and customer-protection requirements.
Ensure technology recovery strategies, backups, redundancy, recovery testing, cyber-recovery capabilities, and telecommunications resilience support continuity, disaster recovery, crisis management, and operational resilience objectives.
Coordinate technology recovery during significant business interruptions and report readiness, exceptions, test results, and material risks to management and the Board.
Support enterprise data governance to improve data quality, ownership, lineage, accessibility, retention, security, reporting, and responsible use.
Establish governance and technical standards for artificial intelligence, automation, analytics, and emerging technologies, including use-case approval, data protection, access controls, human oversight, monitoring, and change management.
Promote responsible experimentation and innovation while ensuring new capabilities receive appropriate legal, compliance, risk, information security, privacy, and vendor review before implementation.
Develop and manage the annual technology budget, forecasts, capital plan, staffing plan, vendor expenditures, performance metrics, executive dashboards, and total cost of ownership.
Lead, coach, and develop technology personnel; set performance and development expectations; support succession and workforce planning; and build stakeholder relationships.
Perform other assigned duties while maintaining regular and reliable attendance.
Embody the Bank’s TRAC Values and Critical Behaviors—Teamwork, Relationship, Authenticity, and Commitment—in daily interactions and decisions.
Complete administrative tasks promptly, including required Bank Compliance Training.
Respond to internal and external inquiries by email, phone, or messaging platforms in a timely and professional manner.
Represent the Bank positively through ethical conduct and community involvement.
Demonstrate commitment to EEO policies and foster a respectful, inclusive workplace that values cultural differences, prevents harassment, and supports a diverse workforce.
Follow Bank policies, procedures, and processes and applicable laws, rules, and regulations, including confidentiality, data privacy, and role-specific AML/CFT responsibilities.