Director of Cyber Security

Guardian Credit Union•Prattville, AL

About The Position

The Director of Cybersecurity leads the credit union’s cybersecurity program and is responsible for protecting member information, technology systems, and critical business services from cybersecurity threats. The position provides strategic and operational leadership across cybersecurity risk management, security operations, incident response, vulnerability management, identity and access management, third-party security, regulatory compliance, and security awareness. The Director partners with Technology, Risk Management, Compliance, Internal Audit, business leaders, and executive management to ensure cybersecurity risks are identified, communicated, and effectively managed. The role also leads and develops cybersecurity staff, manages security vendors and service providers, and independently escalates significant cybersecurity risks to executive management and the appropriate Board committee. The position involves primarily sedentary work in an indoor, climate-controlled shared work area with minimal noise. It requires routine computer work averaging 6–8 hours per day when necessary, operation of routine office equipment, and occasional lifting of up to 10 pounds. The employee must be able to bend, sit, stand, and climb or descend stairs in an emergency. Extended hours or off-site travel may be required or requested by management. The role requires reliable attendance, independent work with limited supervision, effective teamwork, clear communication, discretion, and the ability to handle deadlines, accuracy requirements, and changing priorities.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent professional experience.
Significant progressive experience in cybersecurity, information security, technology risk, or related IT disciplines.
Demonstrated experience leading cybersecurity programs, teams, or security operations.
Strong knowledge of incident response, vulnerability management, identity security, security monitoring, risk assessment, and cloud/network security.
Experience in a regulated environment.
Ability to translate complex technical risks into clear business terms for executives and Board members.
Strong leadership, communication, analytical, and problem-solving skills.
Ability to bend, sit, stand, climb or descend stairs in an emergency, lift occasionally up to 10 pounds, and operate routine office equipment.
Ability to perform computer work for an average of 6–8 hours per day when necessary.
Ability to work extended hours or travel off site whenever required or requested by management.
Ability to perform job functions independently or with limited supervision and work effectively individually or as part of a team.
Ability to read and carry out written instructions, follow oral instructions, complete basic mathematical calculations, spell accurately, and understand computer basics.
Ability to speak clearly and deliver information in a logical and understandable sequence.
Ability to deal calmly and professionally with people from diverse cultures and at various organizational levels, and to demonstrate discretion and customer service.
Ability to perform under deadline pressure and requirements for accuracy and quality, handle multiple and changing priorities, and exercise discretion regarding confidential matters.
Regular, reliable, and timely attendance.

Nice To Haves

Financial institution or credit union experience is strongly preferred.
CISSP, CISM, CRISC, GIAC, or other relevant cybersecurity certifications.

Responsibilities

Develop and execute the credit union’s cybersecurity strategy, roadmap, policies, standards, and security program.
Lead security operations, monitoring, threat detection, vulnerability management, and incident response.
Conduct and oversee cybersecurity risk assessments and ensure identified risks are appropriately mitigated.
Oversee identity and access security, including privileged access, strong authentication, least privilege, and access reviews.
Assess the cybersecurity posture of critical vendors and participate in technology vendor due diligence.
Ensure cybersecurity practices align with applicable NCUA, FFIEC, and other regulatory expectations.
Coordinate cybersecurity audits, examinations, penetration tests, and remediation activities.
Maintain and regularly test the cybersecurity incident response program.
Develop and oversee employee cybersecurity awareness and phishing-testing programs.
Evaluate emerging threats, technologies, and security solutions and recommend appropriate investments.
Develop meaningful cybersecurity metrics and communicate security risks and program effectiveness to executive management and the Board.
Lead and develop cybersecurity staff and manage security vendors and service providers.
Independently escalate significant cybersecurity risks to executive management and the appropriate Board committee.