Information Security Officer

Job Description

Job Description

Information Security Officer

Information Security | Banking

Reports to: Chief Risk Officer (CRO)

Summary of the Role

The Information Security Officer leads the development, implementation, and ongoing oversight of the Bank’s Information Security and Vendor Management Programs. Reporting to the Chief Risk Officer, this role safeguards systems and non-public information by identifying and addressing security risks, maintaining regulatory alignment, coordinating technology-related audits and examinations, and keeping Senior Management and the Board of Directors informed. The Officer also promotes organization-wide security awareness and works closely with Information Technology, business leaders, auditors, regulators, vendors, customers, and other external partners.

Key Responsibilities

• Develop, implement, monitor, and continuously improve the Bank’s Information Security and Vendor Management Programs, including related policies, procedures, standards, guidelines, and templates.

• Conduct information technology, cybersecurity, and vendor risk assessments; review technology risks identified by business lines; and perform business impact analyses in alignment with the Business Continuity Plan and Vendor Risk Management Program.
• Identify and evaluate information and cybersecurity threats using recognized assessment methods, including FFIEC CAT and RSAT, and evaluate the security program against established frameworks such as NIST.
• Manage and oversee user entitlement reviews, network-use monitoring, outsourced penetration testing, vulnerability remediation, and the Bank’s Data Life Cycle program through secure destruction of non-public data.
• Develop dashboards and reports that demonstrate program performance, and present assessment results and program status to IT Steering, Operations/Technology, and Compliance Committees, Senior Management, and the Board of Directors.
• Promote a culture of information security through onboarding, awareness communications, phishing-campaign follow-up, and education for employees, customers, and the Board, as appropriate.
• Serve as the focal point for technology-related audits and regulatory examinations by supporting planning, coordinating requested documentation, recording responses, and tracking remediation of findings.
• Monitor applicable state and federal requirements, including the Connecticut Data Privacy Act and GLBA, and recommend updates based on regulatory changes and industry best practices.

Skills

• Strong knowledge of information security, cybersecurity, technology risk management, networking, hardware, software, and data-protection practices.

• Working knowledge of technology auditing procedures, regulatory examination support, vendor risk management, business continuity, and recognized security frameworks.
• Ability to analyze complex technical and business issues, exercise sound judgment, anticipate emerging risks, and recommend practical solutions.
• Excellent written and verbal communication skills, with the ability to explain security concepts clearly to audiences at all levels and to external stakeholders.
• Strong policy development, program management, reporting, presentation, collaboration, and organizational skills.
• Proficiency with Microsoft Office applications.
• Ability to handle confidential organizational information and sensitive non-public personal information with discretion.

Qualifications

• Bachelor’s degree in Computer Science, Management Information Systems, Cybersecurity, or a related field; equivalent applicable information security experience may be considered.

• At least five years of risk management experience, including experience assessing networking, hardware, software, information security, and vendor risks.
• CISSP, CISA, CISM, or a comparable certification is preferred.

• Familiarity with endpoint security solutions, vulnerability management tools, and security monitoring technologies.

• Basic understanding of information technology auditing procedures is required.
• Regular attendance and on-call availability are essential functions of the position.
• No direct reports.

Why Join Us

Join a collaborative banking organization where information security is integral to protecting customers, supporting business continuity, and maintaining trust. This role offers broad organizational visibility, meaningful partnership with senior leaders and the Board of Directors, and the opportunity to shape programs that strengthen the Bank’s security and risk-management posture.

Work Environment & Physical Requirements

• Primarily office-based role requiring prolonged sitting and computer use.

• Regular use of standard office equipment.
• Occasional standing, walking, reaching, stooping, or kneeling.
• Occasional light lifting and moving of items weighing up to 20 pounds.
• Extended periods of computer screen use requiring close vision, visual focus, and the ability to adjust focus.
• Ability to travel by car and provide on-call availability.

Equal Opportunity Employer

We are committed to creating an inclusive and diverse workplace. Employment decisions are based on qualifications, merit, and business needs, without regard to race, color, religion, sex, national origin, veteran status, or any other protected status.

Employee Benefits Snapshot

Health & Wellness

• Medical Insurance
• Prescription Drug Coverage
• Dental Insurance
• Vision Insurance
• AFLAC supplemental coverage
• Health Savings Account (HSA) with employer contribution
• Flexible Spending Accounts (Medical & Dependent Care)

Paid Time Off (PTO)

Full-Time and Benefit Eligible Employees receive a variety of paid time off benefits (prorated based on hire date), including:

• Vacation Time
• Personal Time
• Sick Time
• Birthday Day Off
• Floating Holiday
• Short-Term Disability

Part-Time Employees (20-30 hours) receive:

• Vacation Time
• Personal Time

Financial Protection

• Company-Paid Life Insurance
• Company-Paid AD&D Insurance
• Employee Assistance Program (EAP) for counseling, financial, legal, and family support

Retirement

• 401(k) Plan
• 4% automatic company contribution
• 50% match on the first 8% you contribute
• Potential annual profit-sharing contribution

Additional Resources

• Virtual Medical Visits
• Wellness Programs
• Behavioral Health Support
• Wellness Rewards Program

Eligibility

Medical benefits are available to eligible full-time employees and generally become effective on the first day of the month following 60 days of employment. Paid Time off becomes effective on the first day of month following 90 days of employment.

This summary provides an overview of available benefits. Refer to official plan documents and company policies for complete details and eligibility requirements.