INFORMATION SECURITY MANAGER

Commonwealth Business Bank•Los Angeles, CA

3d•$115,000 - $117,000•Onsite

About The Position

The Information Security Manager is responsible for developing and maintaining the Bank’s information security strategy, vision, and programs. This role helps protect the Bank’s information assets and technology infrastructure from internal and external threats. The position leads initiatives to support regulatory compliance, industry standards, and security best practices while promoting a strong culture of security awareness across the organization. The incumbent also supports effective risk management and helps safeguard the Bank’s data and intellectual property.

Requirements

Strong knowledge of cybersecurity principles, frameworks, and technologies, including NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, cloud security, and other industry-standard security practices.
Exceptional leadership, communication, and interpersonal skills, with a demonstrated ability to collaborate across business and technology functions and influence stakeholders at all organizational levels.
Strong analytical, critical thinking, and problem-solving capabilities, with the ability to assess complex risks and make sound, risk-based decisions in a dynamic and fast-paced environment.
Proven ability to lead, mentor, and develop high-performing cybersecurity teams while fostering a culture of accountability, continuous improvement, and operational excellence.
Bachelor’s degree from an accredited university in Computer Science, Information Technology, Cybersecurity, or a related field.
Minimum of seven (5) years of progressive leadership experience in cybersecurity, with a demonstrated track record of successfully developing, implementing, and managing enterprise cybersecurity programs.
Experience within regulated industries such as financial services with a strong understanding of applicable regulatory and compliance requirements.
Proven ability to align cybersecurity strategies with business objectives, regulatory expectations, and organizational risk management practices.

Nice To Haves

Professional cybersecurity certifications, including CISSP, CISM, CISA, or equivalent credentials, are highly preferred.

Responsibilities

Develop, implement, and continuously enhance the Bank’s Information Security Strategy, Architecture, and Roadmap to align with business objectives, risk appetite, and regulatory requirements.
Establish and maintain enterprise-wide information security policies, standards, procedures, and controls consistent with industry best practices and applicable regulations.
Monitor emerging cybersecurity threats, vulnerabilities, and industry trends, adapting security strategies and controls to address evolving risks.
Identify, assess, prioritize, and oversee the mitigation of information security risks across the organization through a comprehensive risk management framework.
Lead the Bank’s information technology disaster recovery, and cyber resilience programs, including planning, testing, coordination, and ongoing improvement activities.
Oversee the design, implementation, operation, and continuous improvement of security technologies, processes, and controls to safeguard the confidentiality, integrity, and availability of Bank information assets.
Direct cybersecurity incident response, investigation, containment, recovery, and post-incident remediation activities to minimize business impact and strengthen security posture.
Conduct and oversee security assessments, control reviews, audits, and testing activities to evaluate effectiveness and ensure ongoing compliance.
Ensure compliance with applicable laws, regulations, industry standards, and regulatory guidance, including but not limited to GLBA, FFIEC, ISO 27001, and other relevant requirements.
Establish and maintain effective information security governance, reporting, and oversight structures to support enterprise risk management and strategic decision-making.
Serve as the primary liaison with internal and external auditors, regulators, and independent assessors, providing subject matter expertise, guidance, and oversight on security-related reviews, investigations, and assessments.
Develop, implement, and promote enterprise-wide security awareness and training programs to foster a strong culture of cybersecurity and accountability.
Provide leadership, guidance, and specialized security training to Information Technology personnel and other stakeholders on cybersecurity best practices and regulatory expectations.
Perform other duties and responsibilities as assigned by the Chief Information Officer and Executive Management.