Information Security Officer

About the role

The Information Security Officer (ISO) at German American Bank is responsible for establishing and coordinating information security efforts, privacy efforts, and business resumption planning across the company. The role is positioned as a key partner to the Technology Services department, ensuring security and IT activities are completed in a coordinated, prioritized, and timely manner. The ISO carries direct leadership responsibility for both the information security and physical security team(s). This role ensures the bank’s information security strategy is optimal and includes the appropriate controls for mitigating identified threats and risks, including research, development, planning, implementation, communication, and enforcement of IT security design, policies, procedures, solutions, and standards.

Responsibilities

• Develop and maintain the company's information security program, ensuring compliance with all regulatory guidance and information security best practices, including policies and procedures aligned with the bank’s information security program and ownership of the information security risk assessment.
• Maintain, coordinate, and support the bank's enterprise-wide disaster recovery and business continuity plan, including periodic testing.
• Serve as a key contributor and leader in any Incident Response Team issue, including documentation of information security-related incidents.
• Establish and monitor Key Risk Indicators (KRIs) related to information security to align with the bank’s Enterprise Risk Management (ERM) framework and risk appetite. Participate in and contribute reports, projects, and findings at the Tech Risk Committee quarterly and present the annual Information Security Program at the Board Risk Committee.
• Maintain compliance with applicable privacy laws including GLBA, HIPAA, PCI, etc.
• Proactively monitor, evaluate, and implement best practices related to enterprise information security, providing internal guidance on emerging threats.
• Ensure completion of daily reviews of security logs and reports; ensure appropriate follow-up action is taken.
• Evaluate the effectiveness of information security programs of third-party software, hardware, and service providers.
• Oversee user access provisioning for all company systems.
• Lead the Information Security and Physical Security Team(s), including recruiting, hiring, training, and performance management.
• Work closely and collaborate with the Technology Services department to protect information assets through appropriate tools. Coordinate project timelines, resources, and outcomes for new information security initiatives.
• Respond to relevant audit and examination requests, managing resolutions of any findings.
• Oversee the bank’s information security training and awareness efforts, ensuring employees receive timely, role-based education on security practices and emerging threats.

Requirements

• 5-10 years of information and physical security experience.
• 2-3 years of leadership/managerial experience.
• Bachelor's Degree in Information/Cybersecurity, Computer Information Systems, Computer Science, Information Technology Management, Network Management Systems, or related work experience.
• Knowledge and experience with regulatory bodies including FFIEC, FDIC, and banking regulations such as PCI, GLBA, NIST, and Cybersecurity.
• Certifications in or willingness to obtain certification in CISSP, CISM, CISA, or equivalent recognized industry certifications.
• Ability to communicate effectively (written and verbally), maintain confidentiality, work with speed and accuracy, grasp technical information quickly, and work independently and as a team member.
• Strong attention to detail.

Benefits

• Medical, dental, and vision insurance.
• Short-term disability (STD), long-term disability (LTD), and life insurance.
• 25 days of paid time off, 11 paid holidays, and bereavement leave.
• Education Assistance Program.
• Paid Parental Bonding Leave.
• Wellness benefits.
• Life event coverage.
• Service awards.
• Financial benefits including 401(k) match, stock purchase plan, short-term incentives, and long-term equity earning opportunities.
• Logo wear discounts.
• Free checking account, checks, and discounted bank services.

Locations

• Operations Center, 1311 West 12th Ave, Jasper, IN 47546
• Owensboro Downtown, 313 Frederica St, Owensboro, KY 42301
• Evansville Vogel Rd, 4424 Vogel Rd, Evansville, IN 47715

About Us

German American Bancorp and its family of financial services companies employ talented, compassionate people throughout the organization, truly making German American special. Delivering genuine, customized, personal service with a focus on serving customers and communities well, our employees bring the Shield of Excellence commitment to life with each and every interaction.