Director Information Security

CU1 Careers•Anchorage, AK

3d•Hybrid

About The Position

The Director, Information Security serves in an advisory and management capacity, providing the Board and Executive leadership with independent reporting on production information security matters. Reporting includes IT audit and examination findings and responses, threats and risks, incidents and outcomes, and the overall health of the information security program as measured against leadership’s goals and risk tolerance. The role oversees logical security, cybersecurity, incident response, risk management, business impact analysis, investigations, disaster recovery, and business continuity, and serves as an escalated point of contact for IT security and technology risk activities. The position is based at Credit Union 1’s Abbott Headquarters at 1941 Abbott Road and is open to a remote or hybrid schedule. The listed pay range is $124,387 to $188,242 per year. The successful candidate must be legally authorized to work in the United States without restriction; visa sponsorship and relocation assistance are not provided. Candidates selected for the position are subject to a criminal background check.

Requirements

At least ten years of experience in IT security operations or IT auditing.
Knowledge of information security hardware, software, and practices that comply with current industry standards.
Excellent written and oral communication skills, including the ability to explain technical and security concepts to technical and non-technical audiences.
Availability for a flexible work schedule, including weekends, nights, and holidays.
Legally authorized to work in the United States without restriction.

Nice To Haves

Master’s degree in a related field, such as information systems or computer science, or equivalent experience; experience commensurate with the educational equivalent will be considered.
Completion of or active pursuit of CISA, CISM, or CISSP certification.

Responsibilities

Manage the credit union’s information security program and ensure safeguards protecting information assets from internal and external threats are in place and regularly tested.
Oversee and actively manage the Incident Response, Business Impact Analysis, Risk Management, Disaster Recovery, and Business Continuity programs.
Ensure safeguards, controls, and monitoring are in place to reduce and deter fraud, working with Compliance and Data Analytics resources.
Conduct regular qualitative security risk analyses, functional analyses, and gap analyses to evaluate and recommend countermeasures against threats.
Review information security policies and procedures and recommend changes to maintain regulatory compliance, align with industry best practices, and accommodate approved products and activities.
Conduct regular reviews and forensic analyses of IT systems to identify suspected or attempted breaches and policy or procedure violations, and determine the extent of damage.
Manage an Insider Risk program to detect misuse of credit union resources and technology or other elevated organizational risks.
Prepare periodic information security management reports for the IT Steering Committee and/or Board of Directors.
Serve as the primary contact for information security program requests from credit union management, auditors, and examiners.
Provide input and perform risk assessments for new vendors, significant IT infrastructure changes, and periodic assessments of critical products.
Partner across Credit Union 1 to foster a security culture, shared accountability, security awareness, and technology risk management.
Support the corporate mission, vision, and values and maintain positive working relationships with department personnel.
Meet departmental standards and ensure the department participates in all aspects of the Record Retention program, including creation, identification, use, storage, and destruction of records in accordance with policy.
Participate in community service, including service on a nonprofit board or other social service events, at least twice per year; attend management-mandated events.
Perform other duties as assigned.
Comply with Bank Secrecy Act, anti-money laundering, and Office of Foreign Assets Control policies and regulations.

Benefits

Multiple medical plan options, including PPO and HSA-qualified plans.
Dental and vision coverage.
Services supporting mental and physical health.
Employer-paid life insurance, disability coverage, and AD&D coverage.
Voluntary critical illness, accident, and hospital indemnity plans.
401(k) retirement plan with company matching contributions and profit-sharing contributions.
Generous paid time off.
Access to CU1’s accredited early learning center in Anchorage, Alaska.
Employee loan and mortgage discounts.
Education assistance.
Volunteerism and community engagement opportunities.