Director of Information Technology

San Antonio, TX, United States

Role: Director Information Security

Location: Hybrid San Antonio TX, 2-3x onsite.

Duration: Full-Time

Client: Bank Domain

Notes:

Candidate needs to be local to San Antonio or nearby locations. New Braunfels, Cibolo, Live Oak, Boerne, Castroville

We’re a culture that offers resources to benefit your overall health and well-being…

Impact Groups

Development and Mentorship Programs

paid time off, minimum 4 weeks

recognition, awards, and events

vision insurance

matching

reimbursement

Purpose of the Position:

The Director Information Security is responsible for providing leadership and strategic vision across teams in support of enterprise security initiatives. The Director Information Security will work with bank leadership to oversee the formation and operations of a bank-wide Information Security Program and risk management environment that is in support of corporate goals. Responsible for developing, managing and enforcing the Broadway Bank Information Security Policies, implementing security awareness programs and developing best practices to ensure that the bank is providing adequate protection over their information assets and are following all regulatory requirements.

Key Accountabilities:

Drive and modify the Information Security Program by executing projects that advance and improve Information Security for the organization.

Responsible for the development, implementation, and enforcement of effective and reasonable information security policies and practices to secure Broadway’s environment and data within all operational areas of the company.

Accountable for the operational security activities of Broadway’s environment by evolving incident response, staying up to date of emerging threats, collaborating with other IT teams, and ensuring compliance with relevant regulations.

Lead, provide technical leadership and manage a team of Information Security professionals including 3rd party.

Lead audit requirements for the Information Technology department including internal and external auditors ensuring IT controls are defined and in adherence.

Develop an on-going risk assessment and risk analyses to help the organization develop security standards and procedures that support strategic, tactical and operational objectives.

Responsible for compliance reporting related to Information Security.

Lead efforts to internally assess, evaluate and make recommendations to ensure that controls are adequately addressed in the development stage of any new technology, products or services.

Mature an Incident Response Program to address security incidents (breaches), respond to policy violations and implement correction of security breaches. Serve as the official contact point for information security.

Ensure compliance with established information security policies, procedures, and standards through ongoing monitoring process.

Oversee the identity and access management program for all applications across the enterprise.

Maintain and mature security procedures used by security team in on-going administration of new platforms.

Ensures development project design requirements address any potential impact to Information Security and prepare recommendations detailing those efforts.

Responsible for developing and delivering educational training on information security for employees.

Assures that adequate Cyber Security controls are in place to protect the confidentiality, integrity, and availability of computer systems, data, software and hardware. Monitors and assures the data integrity and internal security of information linked to outside sources through communication processes.

Effectively communicates and manages security controls between the IT partners and business units.

Chairs committees related to Information Security.

Makes recommendations on appropriate personnel, physical and technical security controls.

Participates in resolving problems with information security violations.

Understand business processes in order to work with vendors, IT partners and user departments to enhance information security.

Work Experience Requirements:

8 to 10 years hands-on experience in application of standard security technologies, principles, theories, concepts, techniques and strong diagnostic skills acquired through progressive experience

5 to 7 years’ experience of managing and developing technical teams

5 to 7 years’ experience managing capital and operating expense budgets

Strong leadership, strategic thinking and deep understanding of cybersecurity

Strong “hands-on” technical leadership acumen in cybersecurity technologies

Strong experience of regulatory requirements and risk assessments for Financial Institutions

Working knowledge of industry standard Information Security Frameworks

Solid experience on security incident response

Working knowledge on Cloud security infrastructures

Interpersonal, technical and managerial skills working with all levels of staff

Strong verbal and written communications and analytical skills with the ability to convey complex cybersecurity topics in plain language that non-IT leadership can understand

Hands on experience driving strategy into execution including managing project execution

Experienced communication skills with all levels of management in an organization

Knowledge of banking systems and departmental functions preferred.

Knowledge of operating and troubleshooting techniques and technologies preferred

Education Requirements:

BA or BS in Information Systems, concentration in Information Security

Certified Information System Security Profession (CISSP) certification preferred.

Other Qualifications:

Knowledge of Microsoft Technologies including Windows Operation Systems, Microsoft Office Suite, Active Directory and Exchange.

Knowledge of security monitoring systems and devices is preferred.

#J-18808-Ljbffr