Information Security Governance Officer

Park Community Credit Union•Louisville, KY

About The Position

The Information Security Governance Officer serves as Park Community Credit Union’s designated Information Security Officer, reporting to the VP of Risk and providing independent oversight of information security and cybersecurity risks across the organization. The role leads the Credit Union’s Information Security Program by establishing security requirements, assessing risks, evaluating controls, monitoring compliance, tracking remediation, and escalating material concerns. It also oversees third-party information security risks, incident response governance, and regulatory compliance while collaborating with Information Technology. The officer regularly reports information security risks, trends, and program effectiveness to management and relevant governance committees. The position maintains information security governance documentation and coordinates information security matters for internal and external audits and regulatory examinations. It also provides governance oversight of information security considerations in business continuity and disaster recovery planning, and performs other duties as assigned.

Requirements

Five to seven years of progressively responsible experience in information security, cybersecurity, information technology risk management, security governance, or a closely related field.
A bachelor’s degree, or industry-recognized professional certifications such as CISM, CISSP, or CISA in lieu of a degree.
Knowledge of cybersecurity technologies and security controls, including anti-malware, MDR/XDR, firewalls, and other security solutions, with the ability to assess associated risks and control effectiveness.
Understanding of network security principles, IT infrastructure, and cybersecurity frameworks sufficient to evaluate information security risks and provide independent oversight.
Knowledge of office equipment, word processing, spreadsheets, email, personal computers, and PC operating systems.
Ability to work and travel independently and use general office equipment.
Interpersonal skills for resolving conflicts, building relationships, and soliciting cooperation; discussions require confidentiality, discretion, diplomacy, and tact.
Ability to frequently sit, stand, and walk short distances; use hands and fingers to handle documents and office tools; read, write, listen, speak, and use computers and office equipment throughout the workday.
Ability to occasionally stoop, bend, squat, reach overhead, push or pull office furniture and other objects, and lift or move up to 15 pounds and on occasion up to 25 pounds.

Responsibilities

Lead the Credit Union’s Information Security Program, including identifying, assessing, monitoring, and reporting cybersecurity and technology-related risks.
Maintain security risk assessments, establish security requirements, evaluate mitigating controls, and independently challenge Information Technology and other departments.
Ensure material risks, exceptions, and deficiencies are documented, escalated, and aligned with the Credit Union’s risk appetite.
Develop, maintain, and oversee information security policies, standards, and requirements.
Monitor emerging cybersecurity threats, industry practices, and applicable regulatory expectations; assess compliance, recommend program enhancements, and report risks, trends, and material concerns to management and governance committees.
Oversee information security risks associated with third-party service providers and technology vendors, including security due diligence, vendor assessments and SOC reports, contractual protections, deficiencies, and escalation of material concerns.
Oversee governance of the Incident Response Program, including procedures, escalation protocols, regulatory notification considerations, and reporting requirements.
Coordinate with Information Technology and other stakeholders to evaluate significant security incidents, monitor corrective actions, and oversee periodic incident response exercises.
Provide governance oversight of information security considerations within business continuity and disaster recovery planning.
Maintain information security governance documentation, including risk assessments, policies, exceptions, incident records, and remediation tracking.
Coordinate information security matters for internal audits, external audits, and regulatory examinations; respond to findings, monitor corrective action plans, and report material deficiencies.
Support Park’s culture and mission, provide friendly, professional, and accurate service, maintain a professional work environment, promote teamwork, and follow security policies and procedures.
Perform other duties as assigned.