Director, Cybersecurity

OceanAir Federal Credit Union•Oxnard, CA

2h•Onsite

About The Position

At OceanAir Federal Credit Union, we’re committed to protecting our members, our team, and our future. We’re looking for a Director of Cybersecurity who is ready to lead, innovate, and strengthen our security posture while living our core values: Make It Right, Make It Easy, and Make It Personal. This role is a key leadership position within Information Technology, responsible for safeguarding the confidentiality, integrity, and availability of our systems and data. Why You’ll Love This Role You’ll lead enterprise-wide cybersecurity strategy and make a real impact on member trust and organizational resilience You’ll partner closely with executive leadership, IT, compliance, and business teams You’ll shape and grow security programs, policies, and people in a mission-driven credit union environment You’ll stay ahead of evolving threats while building a strong, security-aware culture

Requirements

5–8 years of credit union or financial institution technology experience, with at least 3 years in a cybersecurity role
Strong knowledge of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls)
Experience with risk management, vulnerability management, and incident response
Understanding of credit union or banking systems (e.g., Jack Henry Symitar, Q2)
Strong leadership, communication, and relationship-building skills
Ability to analyze financial and risk data and recommend strategic actions
Bachelor’s degree in Information Technology, Computer Science, Information Security, or related field

Nice To Haves

Security certifications such as CISSP, CISM, or CISA highly preferred
Knowledge of BSA/AML/OFAC regulations as applicable to this role

Responsibilities

Develop and implement comprehensive cybersecurity strategies aligned with organizational goals and industry best practices
Establish, enforce, and continuously improve security policies, standards, and procedures
Oversee the Information Security Program (ISP), including risk assessments, system evaluations, and ongoing monitoring
Lead incident response planning and execution to minimize business and security impacts
Design and maintain technical security controls (firewalls, IDS/IPS, encryption, access controls, tokenization, etc.)
Conduct and oversee security audits, vulnerability assessments, and penetration testing
Support Business Continuity Planning (BCP) and collaborate on disaster recovery efforts
Manage, mentor, and develop a team of IT security professionals
Promote security awareness through training and education programs
Support budgeting and long- and short-term technology strategies related to cybersecurity
Prepare executive-level reports, business cases, and proposals for leadership and committees
Collaborate cross-functionally to ensure security is embedded in new systems and technologies
Stay current on regulatory requirements, emerging threats, and industry trends