Senior Information Risk Officer

Columbia Bank•South Jordan, UT

2d•Onsite

About The Position

The Senior Information Risk Officer leads information governance, risk, and compliance efforts, including establishing and maintaining risk management, monitoring, and validation activities and facilitating the development of relevant policies and standards. The role requires cybersecurity risk assessment experience, detailed understanding of control requirements, data analytics, and the ability to communicate insights through data. The officer maintains governance and process documentation, conducts formal risk assessments and self-assessments, evaluates technology and security controls, and advises technology teams and business units on compliance readiness. The role tracks gaps in Bank risk programs, evaluates new assets and vendors, and coordinates with technology leaders and corporate risk and operational groups. It also requires keeping current with applicable banking regulations and policies, completing required training, and may include coaching or training others and performing other assigned duties. This position is based fully onsite at 111 N Wall St Building, Spokane, WA 99201, with occasional travel. The stated pay range is $92,196,000.00–$115,000.00; pay depends on job-related knowledge, skills, experience, education, and geographic location. The role may be eligible for performance-based incentive compensation. Benefits are available to eligible associates scheduled to work at least 30 hours weekly, beginning the first day of the month following hire.

Requirements

7–10 years of experience in, or a combination of, information security, IT audit, or information technology operations.
Knowledge of risk management processes, including information security management.
Experience evaluating controls against information security frameworks such as ISO 27002 and NIST 800 series, or financial services regulatory frameworks such as FFIEC IT booklets and the Cybersecurity Assessment Tool (CAT).
Knowledge of systems and network concepts, including access, authorization, configuration, and design.
Understanding of information security concepts, including encryption, access controls, network security, security operations, security architecture, threat modeling, and design.
Knowledge of applicable regulatory requirements, including PCI DSS, GLBA, and HIPAA.
Ability to work cross-functionally and build and foster relationships with departments and stakeholders.
Ability to anticipate and respond to changing priorities and work effectively in a dynamic, demand-based environment requiring flexibility and responsiveness.
Occasional travel is required.

Nice To Haves

High school diploma or GED (preferred).
Bachelor’s degree in computer science or equivalent (preferred).
CISA, CRISC, CISSP, CISM, or SANS GIAC certification (such as GSNA).

Responsibilities

Maintain and develop governance, process, and procedure documentation describing how information should be secured.
Conduct formal risk assessments and self-assessments for key processes and technologies, using industry standards such as CIS, ITIL, and COBIT to develop a program for Columbia Bank.
Analyze internal technology and security controls for compliance with documented and approved standards.
Ensure information systems and vendors in the Bank’s operating environment comply with company policies, standards, and procedures.
Provide advisory support and subject-matter expertise to technology teams and business units for compliance readiness.
Track and monitor gaps in key Bank risk programs; maintain gap analysis documents and gather information from technology and lines of business to identify improvements.
Identify new assets or vendors and oversee risk evaluations to determine risk rankings.
Coordinate with technology leaders and corporate risk and operational groups, including TPO, TAG, Internal Audit, Corporate Compliance, Enterprise Risk Management, and Legal.
Demonstrate compliance with applicable bank regulations and keep current with regulatory changes.
Follow Bank policies, procedures, and compliance regulations, and complete required annual or job-specific training.
Maintain working knowledge of applicable written Bank policies and procedures, including those concerning the Bank Secrecy Act, Regulation P, Regulation CC, Regulation E, and Bank Security.
May coach, mentor, or train others and teach coursework as a subject-matter expert.
Learn, demonstrate, and foster Columbia’s corporate culture; take personal initiative and act as a positive example; embrace the Bank’s vision and strategic direction.
Perform other duties as assigned.

Benefits

Medical, dental, and vision plans
401(k) retirement savings plan with employer match for qualifying associate contributions
Employee assistance program
Life insurance
Disability insurance
Tuition assistance
Mental health resources
Identity theft protection
Legal support
Auto and home insurance
Pet insurance
Access to an online discount marketplace
Paid vacation
Paid sick days
Paid volunteer days
Paid holidays
Potential performance-based incentive compensation