Information Security Officer

Evolve Bank & Trust • Memphis, TN

6d

About The Position

The Information Security Officer (ISO) is the Bank’s independent second-line information security leader within Enterprise Risk Management. The role oversees governance, risk assessment, reporting, and escalation of cybersecurity and information security risks. The ISO provides independent challenge, evaluates control effectiveness, supports regulatory compliance, and ensures security risks are identified, managed, and communicated to Executive Management, the Audit Committee, and the Board. The role maintains overall oversight of the Information Security Program while remaining independent of day-to-day technology operations, security administration, and technical control implementation.

Requirements

• Bachelor’s degree in information security, cybersecurity, computer science, information technology, risk management, business administration, or a related field.
• Minimum 7–10 years of progressive experience in information security, cybersecurity, technology risk management, enterprise risk management, audit, compliance, or related disciplines.
• Experience leading information security governance, risk management, compliance, or cybersecurity oversight functions.
• One or more relevant certifications, such as CISSP, CISM, CCSP, or other cybersecurity, risk, or governance certifications.
• Strong knowledge of cybersecurity governance, information security, risk management, and applicable banking regulations.
• Understanding of IT infrastructure, security architecture, cloud technologies, identity and access management, vulnerability management, and incident response.
• Advanced analytical, risk assessment, and problem-solving skills, including the ability to identify emerging risks and evaluate control effectiveness.
• Excellent communication, presentation, and relationship-building skills, including the ability to influence and credibly challenge senior leaders and board-level stakeholders.
• Ability to manage multiple priorities and operate effectively in a dynamic, highly regulated environment.

Nice To Haves

• Master’s degree.
• Experience interacting with executive leadership, regulators, auditors, and board-level committees within a financial services environment.
• Banking or regulated financial institution experience.

Responsibilities

• Independently assess the effectiveness of information security controls and the Information Security Program.
• Identify, assess, and communicate information security risks.
• Evaluate Information Security Program maturity and effectiveness.
• Challenge management decisions relating to information security risk.
• Recommend corrective actions and remediation activities.
• Escalate unresolved information security concerns.
• Review and recommend changes to information security policies and standards.
• Participate in governance committees and risk management activities.
• Provide cybersecurity and information security reporting to Executive Management and the Audit Committee.
• Support regulatory examinations and information requests.
• Recommend Information Security Program enhancements and strategic initiatives.
• Recommend risk mitigation activities based on identified threats, vulnerabilities, and control deficiencies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior