Information Security Governance Officer

Park Community Credit Union•Louisville, KY

4d•$131,556 - $135,625

About The Position

The Information Security Governance Officer serves as Park Community Credit Union’s designated Information Security Officer, reports to the VP of Risk, and provides independent oversight of information security and cybersecurity risks across the organization. The role leads the Credit Union’s Information Security Program by establishing security requirements, assessing risks, evaluating controls, monitoring compliance, tracking remediation, and escalating material concerns. It oversees third-party information security risks, incident response governance, and regulatory compliance while collaborating with Information Technology. The officer regularly reports security risks, trends, and program effectiveness to management and relevant governance committees. The position also maintains information security governance documentation and coordinates information security matters for internal and external audits and regulatory examinations. It supports Park’s mission and culture, provides professional service to members and coworkers, promotes teamwork, and follows security policies and procedures.

Requirements

Five to seven years of progressively responsible experience in information security, cybersecurity, information technology risk management, security governance, or a closely related field.
A bachelor’s degree, or industry-recognized professional certifications such as CISM, CISSP, or CISA in lieu of a degree.
Knowledge of office equipment, word processing, spreadsheets, email, personal computers, and PC operating systems.
Ability to work and travel independently and use general office equipment.
Knowledge of cybersecurity technologies and security controls, including anti-malware, MDR/XDR, firewalls, and other security solutions, and ability to assess associated risks and control effectiveness.
Understanding of network security principles, IT infrastructure, and cybersecurity frameworks sufficient to evaluate information security risks and provide independent oversight.
Strong interpersonal skills for relationship building, soliciting cooperation, first-level conflict resolution, and communicating with confidentiality, discretion, diplomacy, and tact.
Ability to frequently sit, stand, and walk short distances; use hands and fingers to handle objects and office tools; read, write, listen, speak, and use office equipment and software throughout the workday; occasionally stoop, bend, squat, reach overhead, push or pull objects, and lift or move up to 25 pounds.

Responsibilities

Lead the Credit Union’s Information Security Program, including identifying, assessing, monitoring, and reporting cybersecurity and technology-related risks.
Maintain security risk assessments, establish security requirements, evaluate mitigating controls, and independently challenge Information Technology and other departments.
Ensure material risks, exceptions, and deficiencies are documented, escalated, and aligned with the Credit Union’s risk appetite.
Develop, maintain, and oversee information security policies, standards, and requirements.
Monitor emerging cybersecurity threats, industry practices, and applicable regulatory expectations; assess compliance and recommend program enhancements.
Report information security risks, trends, and material concerns to management and relevant governance committees.
Oversee information security risks associated with third-party service providers and technology vendors, including security due diligence, assessments, SOC reports, contractual protections, deficiencies, and escalations.
Oversee governance of the Incident Response Program, including procedures, escalation protocols, regulatory notification considerations, reporting requirements, corrective actions, and periodic exercises.
Provide governance oversight of information security considerations in business continuity and disaster recovery planning.
Maintain governance documentation, including risk assessments, policies, exceptions, incident records, and remediation tracking.
Coordinate information security matters for internal audits, external audits, and regulatory examinations; respond to findings, monitor corrective action plans, and report material deficiencies.
Support Park’s culture and mission, provide friendly, professional, and accurate service, promote teamwork, maintain a professional work environment, and follow security policies and procedures.
Perform other duties as assigned.