Director, Information Security

The Clearing House • Liberty, NY

1d • Hybrid

About The Position

The Director, Information Security provides strategic leadership, governance, and operational oversight for the organization’s Information Security programs. The role leads the development and execution of strategies, policies, standards, and controls that protect enterprise systems, applications, data, and critical business operations from cyber threats. It combines strategic leadership, cybersecurity expertise, and operational execution, including building high-performing teams, managing complex security programs, influencing executive stakeholders, and working in highly regulated environments.

The Clearing House Payments Company L.L.C. is a bank-owned industry utility that provides infrastructure for safe, reliable, and efficient payments. It operates the CHIPS high-value wire-transfer system, the RTP instant payments system, the EPN automated clearinghouse network, and the Image Exchange Network. It also operates a bank account number tokenization service, the TCH Payments Authority payments association, and the ECCHO business line.

The position oversees enterprise security strategy and functions including security operations, threat and vulnerability management, identity and access management, cloud and application security, and security governance. The Director leads security risk and compliance activities, incident response, executive reporting, and the development of Information Security staff. Candidates will report to the office three days each week; onsite requirements may change. Travel may be required.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
• 10+ years of progressive experience in cybersecurity, information security, technology risk, or related disciplines.
• 5+ years of leadership experience managing cybersecurity teams and security programs.
• Strong understanding of cybersecurity frameworks, risk management methodologies, and security operations.
• Experience leading enterprise security initiatives involving cloud technologies, identity management, vulnerability management, and security operations.
• Demonstrated experience developing and executing cybersecurity strategies and roadmaps.
• Experience presenting cybersecurity risks and recommendations to executive leadership and governance committees.
• Strong knowledge of security technologies, controls, and industry best practices.
• Excellent leadership, communication, stakeholder management, and decision-making skills.
• Must be legally authorized to work in the United States.

Responsibilities

• Develop, maintain, and execute the enterprise Information Security strategy, roadmap, and operating model, aligning initiatives with business objectives, risk priorities, and regulatory requirements.
• Lead Information Security functions including security operations, threat management, vulnerability management, identity and access management, cloud security, application security, and security governance.
• Advise leadership on cybersecurity risks, emerging threats, and mitigation strategies; foster security awareness and evaluate emerging technologies and trends.
• Establish and maintain security policies, standards, procedures, and control frameworks, and ensure compliance with applicable regulatory, legal, and industry requirements.
• Lead security risk assessments; oversee remediation of risks and control gaps; partner with Risk Management, Compliance, Legal, and Internal Audit; and support examinations, assessments, and audits.
• Oversee SOC activities, security monitoring, incident detection, response, and recovery; direct response and executive communications during significant security events.
• Maintain threat intelligence, threat hunting, and security monitoring programs, and use security metrics and trends to drive operational improvements and business resiliency.
• Provide executive oversight of vulnerability management across infrastructure, cloud, applications, and third-party environments; establish risk-based prioritization and oversee identification, remediation, and validation.
• Monitor cybersecurity risk exposure, ensure stakeholders understand associated risks, and review and approve remediation plans, exceptions, and compensating controls.
• Oversee governance of user access, privileged access, authentication, and identity lifecycle management, including IAM, PAM, and IGA capabilities; promote least privilege, MFA, and zero-trust principles.
• Provide strategic oversight for cloud security and secure application development; integrate security into architecture, cloud platforms, and software development lifecycles; support DevSecOps and secure-by-design practices.
• Oversee security reviews of cloud services, applications, APIs, and third-party technologies.
• Lead, mentor, and develop Information Security managers, engineers, analysts, and specialists; set goals and performance expectations; and establish professional development plans.
• Build a collaborative, high-performing security organization; manage staffing, succession planning, budget planning, and resource allocation; and promote accountability and continuous improvement.
• Communicate cybersecurity risks, program status, and initiatives to executive leadership and governance committees; develop dashboards and reporting; and translate technical risks into business impact and recommendations.
• Partner with business leaders to balance security requirements and operational objectives, and represent Information Security in strategic planning, governance forums, and cross-functional initiatives.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• 401(k) plan with company contribution and company match
• Tuition reimbursement
• Discretionary incentive compensation may be awarded for eligible positions, contingent on personal and company performance

What This Job Offers

• Job Type: Full-time
• Career Level: Director