Chief Information Security Officer

FIRSTBANK SOUTHWEST•Amarillo, TX

1d•Onsite

About The Position

Responsible for establishing and maintaining the bank’s information security strategy, policies, and programs to protect information assets, customer data, and financial transactions from cyber threats.

Requirements

Bachelor’s degree in Cyber Security, Information Technology, Computer Science plus 5+ years experience; OR Master’s degree in Cyber Security, Information Technology, Computer Science
General computer skills
Microsoft Office, specifically Word and Excel
Works well independently
Treats all customers and fellow employees with respect
Exceeds customer expectations
Meets customer needs
Maintain confidentiality of all bank records
Conducts interactions with honest, ethical, and strong moral principles
Performs at the highest level
Takes responsibility for actions
Does what is expected
Leads by example and takes initiative
Works as a team
Efficiently shares information in a collaborating and proactive manner
Pays attention to detail
Solves problems
Makes sound decisions
Manages time effectively
Prioritizes effectively
Performs multiple tasks simultaneously
Shows up for work and is on time
Complies with all laws and regulations
Completes all required training
Adheres to Bank Values

Nice To Haves

CISSP or other Technical Certifications preferred

Responsibilities

Develops and implements a comprehensive information security strategy aligned with the bank’s objectives.
Establishes and enforces information security policies, procedures, and best practices.
Provides strategic security guidance to executive leadership and the board of directors.
Leads the development and execution of cybersecurity initiatives to mitigate risks.
Identifies, assesses, and manages cybersecurity risks across the organization.
Ensures compliance with relevant regulations (e.g., GLBA, FFIEC) and industry standards.
Oversee audits, risk assessments, and security testing to identify vulnerabilities.
Collaborates with legal and compliance teams to address cybersecurity-related legal and regulatory requirements.
Implements security monitoring, threat detection, and response mechanisms.
Leads incident response efforts and coordinate with law enforcement and regulatory agencies during security breaches.
Oversees security awareness training for employees and ensures adherence to security policies.
Oversees the deployment and maintenance of security technologies, including firewalls, intrusion detection systems, and encryption.
Ensures secure design and architecture of digital banking systems, ATMs and payment networks.
Collaborates with IT teams to integrate security into IT infrastructure and cloud computing strategies.
Enforces identity and access management policies.
Conducts regular access reviews to ensure compliance and minimize risks.
Oversees bank’s IDP and works to improve and secure authentication.
Conducts regular asset and threat-based risk assessments and provide reports to executive management.
Recommends and tracks implementation/compliance with security baselines.
Leads Vendor Management program by evaluating risk of vendors, establishing controls, and working with vendor owners to perform due diligence reviews.
Leads Business Continuity Program to ensure continued bank resilience and availability.
Other duties as assigned.