EVP Chief Information Security Officer

About the role

We’re always looking for bright individuals to join our growing organization. As a part of the First Financial Family, we will invest in your development and provide a dynamic work environment where you’re challenged, valued and empowered every day. We strive to be the best destination for the industry’s top talent, creating a diverse, collaborative workplace that celebrates innovation and change. We are one team, working together to get things done. Office Location: Abilene, Texas, United States.

Responsibilities

• Develop, implement, maintain, and continuously improve the Company's Information Security Program.
• Establish and oversee information security policies, standards, procedures, and governance processes.
• Evaluate the effectiveness of security controls and recommend enhancements to address evolving threats and business risks.
• Monitor the cybersecurity threat landscape and ensure appropriate controls are implemented to safeguard Company assets.
• Lead enterprise cybersecurity strategy and planning activities aligned with organizational objectives and regulatory expectations.
• Provide executive oversight of the Enterprise Identity and Access Management (IAM) Program.
• Oversee governance of user access across Company applications, systems, and infrastructure.
• Ensure appropriate processes exist for provisioning, modifying, reviewing, certifying, and revoking user access rights.
• Oversee user access reviews, role management, segregation of duties, authentication controls, and privileged access management practices.
• Collaborate with business and technology leaders to ensure access governance supports operational efficiency and risk management objectives.
• Participate as a member of the Artificial Intelligence Governance Council.
• Provide cybersecurity, information protection, privacy, and risk management guidance regarding the use of artificial intelligence technologies.
• Assess security implications and emerging risks associated with artificial intelligence, automation, and new technologies.
• Recommend governance practices and controls to support the secure and responsible use of emerging technologies.
• Prepare and deliver risk-based reports regarding information security, cybersecurity, technology risk, and emerging threats.
• Provide periodic reporting to executive management, the Risk Committee of the Board of Directors, the First Technology Services Board, and the First Financial Wealth Management Board.
• Present cybersecurity program performance, strategic initiatives, regulatory developments, and risk exposures in a manner appropriate for executive and board audiences.
• Advise executive leadership and Boards regarding cybersecurity strategy, risk management decisions, and security investments.
• Direct and oversee the Company's Security Awareness and Training Program.
• Manage enterprise-wide cybersecurity awareness initiatives designed to strengthen the organization's security culture.
• Oversee security awareness training, monthly security education programs, phishing awareness initiatives, and employee communications.
• Ensure the effectiveness of awareness efforts through metrics, reporting, and continuous improvement activities.
• Promote cybersecurity awareness and accountability among employees, management, and executive leadership.
• Review and evaluate the information security controls of third-party service providers, contractors, and vendors with access to Company information as requested.
• Support the development, maintenance, and testing of cybersecurity incident response plans and procedures.
• Coordinate security incident preparedness activities and cybersecurity tabletop exercises.
• Assist in managing significant cybersecurity incidents and remediation efforts.
• Serve as the Company's primary information security advisor.
• Provide guidance regarding security risks