Vice President, Information Security

Vice President Of Information Security

The Vice President of Information Security is responsible for the strategic development, implementation, and oversight of the credit union's information security and cyber risk management programs. This role is a visionary leader who establishes a robust security posture that aligns with the organization's objectives, risk tolerance, and regulatory requirements. Key focus areas include cyber risk assessment, threat intelligence, incident response, and maintaining a culture of security awareness. This role directly impacts the safety and trust of our members, as well as the security and resilience of all digital assets.

Primary Responsibilities and Duties :

• Define, execute, and sustain a forward-looking information security strategy that aligns with the credit union's vision and business objectives. Establish security roadmaps, budget requirements, and risk management protocols that reflect emerging threats and industry best practices.
• Oversee the assessment of information security risks and implement programs to manage and mitigate these risks proactively. Advise senior leadership on risk prioritization, mitigation strategies, and resource allocation for cybersecurity initiatives.
• Mentor and lead a high-performing security team, providing clear objectives, development opportunities, and alignment with organizational goals. Empower the team to foster a proactive security culture, instilling accountability and ownership of security practices across all levels.
• Lead the establishment of information security governance frameworks and ensure continuous adherence to regulatory requirements (SSAE16, PCI, GLBA, FFIEC). Collaborate with Legal, IT, HR, and other departments to develop compliance and remediation strategies.
• Develop, implement, and continuously improve business continuity and disaster recovery plans to ensure organizational resilience. Direct incident response planning, including team coordination, investigation methodologies, and timely reporting for internal and external stakeholders.
• Oversee deployment and management of security technologies, such as security information and event management (SIEM), intrusion detection / prevention systems (IDPS), and endpoint detection and response (EDR). Ensure that information security operations are optimized for effective threat detection, monitoring, and response.
• Serve as the primary advisor to the executive team, communicating risks and security initiatives in a business-centric, non-technical manner. Promote security awareness across the organization through training programs and frequent communication to build a security-conscious culture.
• Stay updated on emerging security trends, technologies, and regulatory changes, continuously improving security practices and adapting strategies as necessary. Lead initiatives that leverage new technology and innovative practices to enhance the credit union's security posture.

Knowledge / Skills :

Minimum Requirements :

Everwise is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.