Director Information Security

Credit Union 1 Alaska•Anchorage, AK

1d•$124,387 - $188,242

About The Position

The Director, Information Security serves in an advisory and management capacity, providing the Board and executive leadership with independent reporting on production information security matters. Reporting covers IT audit and examination findings and responses, threats and risks, incidents and outcomes, and the health of the information security program relative to leadership goals and risk tolerance. The role oversees logical security, cybersecurity, incident response, risk management, business impact analysis, investigations, disaster recovery, and business continuity, and serves as an escalated contact for IT security and technology risk activities. The position is based at Credit Union 1’s Abbott Headquarters at 1941 Abbott Rd. and is open to a remote or hybrid schedule. The Director manages the credit union’s information security program and its safeguards, controls, monitoring, risk assessments, policies, forensic reviews, insider-risk program, and reporting. The role works with colleagues across the credit union to promote security awareness, shared accountability, and technology risk management. The position also supports compliance with BSA/AML and OFAC requirements, record retention responsibilities, and community service expectations for management staff.

Requirements

At least ten years of experience in IT security operations or IT auditing.
Knowledge of information security hardware, software, and practices that comply with current industry standards.
Excellent written and oral communication skills, including the ability to explain technical and security concepts to technical and non-technical individuals.
Availability for a flexible work schedule that includes weekends, nights, and holidays.
Legally authorized to work in the United States without restriction; Credit Union 1 does not provide visa sponsorship.

Nice To Haves

Master’s degree in a related field, such as information systems or computer science, or equivalent experience; job experience commensurate with the educational equivalent will be considered.
Completion of or active pursuit of CISA, CISM, or CISSP certification.

Responsibilities

Manage the credit union’s information security program and ensure safeguards are in place and regularly tested to protect information assets from internal and external threats.
Oversee and actively manage the Incident Response, Business Impact Analysis, Risk Management, Disaster Recovery, and Business Continuity programs.
Ensure safeguards, controls, and monitoring are in place to reduce and deter fraud, in collaboration with Compliance and Data Analytics resources.
Assess security risk through regular qualitative risk analysis, functional analysis, and gap analysis; evaluate and recommend countermeasures to mitigate threats.
Review information security policies and procedures regularly and recommend changes to maintain compliance with regulatory changes and industry best practices and accommodate approved products and activities.
Conduct regular IT systems reviews and forensic analysis to identify suspected or attempted breaches or policy and procedure violations, and determine the extent of resulting damage.
Manage an Insider Risk program to detect misuse of credit union resources or technology and exposure to elevated organizational risk.
Prepare periodic information security management reports for the IT Steering Committee and/or Board of Directors.
Serve as the primary contact for information requests about the credit union’s information security program from management, auditors, and examiners.
Provide input and perform risk assessments for new vendors, significant IT infrastructure changes, and periodic assessments of critical products.
Partner across Credit Union 1 to foster a culture of security, promote shared accountability, and strengthen security practices, awareness, and technology risk management.
Demonstrate support for the corporate mission, vision, and values and maintain positive working relationships with department personnel.
Meet department standards in completing assigned duties.
Participate in community service, including service on a nonprofit board or participation in social service events; management staff must complete community service at least twice per year, with some activity outside normal working hours. Attend management-mandated events.
Oversee the department’s participation in the Record Retention program, including creation, identification, use, storage, and destruction of records in accordance with policy.
Perform other duties as assigned.
Abide by and comply with BSA/AML and OFAC policies and applicable laws and regulations.

Benefits

Multiple medical plan options, including PPO and HSA-qualified plans.
Dental insurance.
Vision insurance.
Services supporting mental and physical health.
Employer-paid life insurance.
Disability coverage.
AD&D coverage.
Voluntary plans for critical illness, accidents, and hospital indemnity expenses.
401(k) retirement plan with company matching contributions.
Profit-sharing contributions.
Generous paid time off.
Access to Credit Union 1’s accredited early learning center in Anchorage, Alaska.
Employee loan and mortgage discounts.
Education assistance.
Volunteerism and community engagement opportunities.