Deputy Chief Information Security Officer - Bank

Responsibilities

• Own and manage the bank-entity scope of the company’s 2LOD Information Security program
• Serve as the lead for examiner interactions, ensuring a robust and prepared narrative during regulatory reviews
• Lead the remediation of identified IT control deficiencies as per FFIEC standards ahead of examinations
• Maintain and develop the bank's policy architecture, including necessary ratification and approval processes
• Collaborate with the Chief Risk Officer on business continuity, resilience, and recovery exercises
• Manage relationships with internal and external audit teams, ensuring compliance with SOC 2 and FFIEC standards
• Ensure third-party risk management practices meet rigorous bank-level scrutiny

Qualifications

• 8+ years in Information Security, with at least 3 years in a regulated bank or de novo bank charter effort
• Deep knowledge of FFIEC guidelines, OCC Heightened Standards, and BSA/AML supervisory expectations
• Experience defending controls to OCC, FDIC, or Federal Reserve examiners, demonstrating your understanding of regulatory evidence standards
• Ability to craft board-ratifiable policies and operationalize them through supporting standards
• Prioritizing operating discipline, capable of maintaining control currency and effective risk registers
• Understanding of the three-lines-of-defense model with experience in oversight

Benefits

• Equity (stock options) as part of the total rewards package
• Highly competitive benefits updated regularly with industry standards
• Opportunity to build a security program that matches OCC standards while maintaining operational tempo