VP InfoSec Officer

Bridgewater Bank • St Louis Park, MN

21h • Hybrid

About The Position

Bridgewater Bank is seeking an experienced Vice President, Information Security Officer to oversee its information security, business continuity, incident response, and third-party risk programs. Reporting to the Chief Risk Officer, the role ensures these programs align with the Bank’s Enterprise Risk Management program, regulatory expectations, and strategic growth. The officer collaborates with leaders across business lines and lines of defense to identify, assess, monitor, report, and mitigate information and cybersecurity risks.

The role partners with the Chief Risk Officer and Chief Technology Officer to strengthen program governance and oversight; assesses information security risks and controls; supports data governance and cybersecurity controls; manages incident response; oversees third-party risk reviews; develops monitoring tools and key risk indicators; administers security awareness and training; and serves as a liaison for regulatory examinations and independent audits.

This exempt position offers a hybrid work model. The typical annual base pay range is $150,000–$200,000, and the position is eligible for a discretionary annual incentive program based on organizational and individual performance. Bridgewater Bank describes itself as an entrepreneurial bank with an award-winning culture and opportunities for personal and professional growth.

Requirements

• Bachelor’s degree in information security, technology, finance, or another business-related field.
• At least 7 years of information security, cybersecurity, technology, or IT audit experience in banking, financial services, or another regulated industry.
• Experience with meaningful ownership or oversight of an information security program, risk assessments, control design, and assurance monitoring.
• Working knowledge of technology platforms, identity and access management, data protection, vulnerability management, security operations, incident response, and cyber resilience.
• Ability to evaluate risk materiality, form evidence-based conclusions, and translate technical security issues into clear business and risk recommendations.
• Demonstrated ability to present cybersecurity and technology risk matters to Boards, executive management, committees, and technical and non-technical audiences.
• Ability to build effective relationships across business lines and lines of defense, influence without relying on hierarchy, and drive sustainable remediation.
• Experience working with regulators or external auditors on information security or cybersecurity matters.
• Excellent verbal, written, and interpersonal communication skills, with strong attention to detail, critical thinking, accuracy, prioritization, and follow-through.
• CISSP, CISA, CISM, CRISC, or equivalent certification.

Responsibilities

• Partner with the Chief Risk Officer and Chief Technology Officer to strengthen governance and oversight of information security, business continuity, and third-party risk programs.
• Create information security risk assessments, evaluate the effectiveness of IT security controls, and propose scalable enhancements to address potential gaps.
• Coordinate with business leaders to establish and maintain data governance and cybersecurity controls, including oversight of infrastructure and application security, vulnerability management, access management, and cybersecurity and fraud resiliency.
• Manage the incident response plan, including preparation, detection, response, recovery, and communication with applicable stakeholders.
• Oversee data governance, record retention, and privacy laws as they relate to information and cybersecurity.
• Oversee third-party information security and business continuity reviews, including SOC reviews and vendor assessments.
• Develop monitoring tools and key risk indicators for information security program effectiveness and business continuity readiness, for reporting to Senior Management and the Board.
• Administer the Bank’s information security awareness and training program.
• Serve as a primary information security liaison for regulatory examinations and independent audits, and maintain documentation for related requests.

Benefits

• Healthcare, including medical, dental, and vision coverage
• Basic term and optional term life insurance
• Short-term and long-term disability
• Parental leave
• 401(k) with employer match
• Paid vacation
• Paid holidays
• Discretionary annual incentive program based on organizational and individual performance

What This Job Offers

• Job Type: Full-time
• Career Level: Executive