Chief Information Security Officer

Conference Of State Bank Supervisors (Csbs)

Full-time - Senior

Professional, Scientific, and Technical Services

About the position

The Chief Information Security Officer (CISO) at CSBS is responsible for providing vision, leadership, oversight, and management of the organization's cyber security policies, procedures, and practices. This role involves directing and coordinating security activities, managing information security risks, and ensuring compliance with relevant laws and regulations. The CISO acts as the focal point for all security communications and collaborates with various internal and external stakeholders to enhance the organization's security posture.

Responsibilities

• Develop an information security vision and strategy aligned with organizational priorities.
• Manage the CSBS strategic security program and plan, considering business and legal requirements.
• Monitor the effectiveness of the information security program and recommend improvements.
• Develop and maintain an information security management framework based on NIST Cyber Security Framework.
• Enforce CSBS' cyber security policies and practices to protect sensitive corporate assets.
• Conduct periodic audits and assessments to ensure compliance with regulations.
• Create a framework for roles and responsibilities regarding information ownership and protection.
• Manage contractors and outsourcers providing technology services to CSBS.
• Develop a risk-based process for assessing and mitigating information security risks.
• Ensure technology solutions adhere to appropriate security practices and requirements.
• Manage the CSBS incident response plan and coordinate security incidents.
• Interface with state and federal regulators regarding CSBS' security posture.
• Facilitate a metrics and reporting framework to measure the efficiency of the security program.
• Manage the information security budget and prioritize security initiatives.

Requirements

• Master's degree in a technology-related discipline or equivalent work experience in information security, privacy, or compliance.
• Minimum of 10 years of experience in security, with at least 8 years in managing information security programs.
• Experience as a Chief Information Security Officer (CISO) or Chief Security Officer (CSO) in the financial services industry is preferred.
• Knowledge of current physical and logical security issues and best practices in data center infrastructure, networks, and applications.
• Ability to communicate effectively at the executive level and with the Board of Directors.

Nice-to-haves

• Industry Security Certification such as CISSP, CISA, or CISM is desired.
• Additional certifications in CAP (FISMA), PCI QSA, ITIL, CSA CCSK (Cloud), or ISO 27001 are optional.

Benefits

• Competitive salary
• Health insurance
• Retirement savings plan
• Professional development opportunities
• Flexible work arrangements