First Vice President, Cyber Security

About the role

The First Vice President, Cyber Security is a hands-on technical leader responsible for driving the execution of Axos Bank's information security strategy. This is a hybrid role that demands both rolling up your sleeves to do deep technical work AND building and leading a high-performing team.

Responsibilities

• Troubleshoot complex technical issues across the security stack (Splunk, CrowdStrike, Azure, Cisco Secure Access, etc.)
• Write and tune detection rules, correlation searches, and AI-powered investigation prompts
• Lead technical design sessions and proof-of-concept evaluations for new security capabilities
• Build automation and AI agentic workflows to scale security operations
• Oversee 24/7 security operations and ensure readiness for incident response
• Drive continuous improvement of detection, response, and recovery capabilities
• Build autonomous SOC capabilities leveraging AI and automation

Requirements

• Deep hands-on technical expertise with willingness to architect, configure, troubleshoot, and build security solutions directly
• Ability to balance personal technical execution with developing team capability—knowing when to do the work yourself and when to coach others through it
• Track record of driving multiple strategic initiatives simultaneously while staying in technical details
• Demonstrated bias for action and execution velocity—candidates who work methodically at a measured pace will not succeed in this environment
• Commitment to the demands of a senior leadership role in cyber security, including availability for crisis response and emerging threats outside standard business hours
• Comfort moving fluidly between writing Splunk detection rules in the morning and presenting to senior leadership in the afternoon

Qualifications

• 10+ years of progressive experience in information security with at least 5 years in technical leadership roles where you personally built solutions while managing teams
• Recent hands-on work with security platforms—not just oversight. You should be able to configure a Entra Conditional Access Policy, write a CrowdStrike IoA rule, or investigate an Azure identity issue without handing it off
• Deep expertise in security operations, Active Directory/Entra, SIEM platforms (Splunk), EDR/XDR, and cloud security
• Strong understanding of AI/ML applications in security operations and autonomous security capabilities
• Working knowledge of identity and access management, network security, application security, and data protection
• Familiarity with banking compliance frameworks (FFIEC, GLBA, PCI DSS)