SVP III, Chief Information Security Officer (CISO)

Description

The CISO ensures the security of millions of card members while balancing innovation and business capabilities. Key responsibilities include designing/improving security practices, managing the information and cyber security management program, overseeing security initiatives, and ensuring compliance with regulations.

• Develop, implement, and maintain information and cyber security policies, standards, guidelines, and procedures.
• Manage the information security budget and oversee periodic examinations, audits, and security assessments.
• Oversee incident response planning and investigations, including impact analysis and root cause analysis.
• Create awareness of new and emerging risks and prepare the company for potential threats.
• Hire, manage, and train security team members, contractors, and third parties.
• Communicate security-related concepts to executives and staff through regular executive-level reporting and awareness training.

Position Requirements

• Bachelor’s Degree in a relevant field of study, with 10+ years of experience leading teams in information security in a regulated industry, preferably in banking or finance.
• 10+ years of experience with information security architecture and enterprise technology, including firewalls, SIEM, DLP, VPN, DMZ, MFA, WAF, intrusion detection/prevention, encryption, anti-virus, anti-malware, SOC operations, forensics, identity management, etc.
• Working knowledge of AI/ML and Generative AI security risks and the technical and procedural controls used to manage them.
• CISSP, CISM, or similar professional certification.
• Experience with legacy banking systems, cloud computing, and external managed services.
• Experience with Federal financial institution examination procedures, FFIEC procedures, and OCC guidance.
• Understanding of information security standards including ISO 17799/27001/27002, NIST Cybersecurity Framework, Center for Internet Security, CISA Cross Sector Cybersecurity Performance Goals, Cloud Security Alliance, PCI-DSS, NIST standards on security and privacy controls, encryption, authentication, cloud computing, NIST frameworks for risk management, including the AI risk management framework.

Preferred Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Computer Engineering, or MIS; Master’s degree in any of these fields preferred.
• Demonstrated experience in AI governance, AI security, and AI programs within a regulated environment.
• Experience with contract and vendor negotiations and management including managed services.
• Experience in modern software development practices, such as Agile, Waterfall, Rapid, etc.

Benefits

At Credit One Bank, you'll enjoy competitive compensation, comprehensive benefits, and a supportive work environment. We're committed to fostering a diverse and inclusive workplace where everyone feels valued and empowered to reach their full potential.