Director, Chief Information Security Officer

Onpoint Community Credit Union - Portland, OR

Full-time - Senior

Portland, OR

Management of Companies and Enterprises

About the position

The Director, Chief Information Security Officer (CISO) at OnPoint leads the enterprise-wide security program, focusing on strategy, operations, and budget management to safeguard the organization's information assets. This role is pivotal in developing security initiatives, policies, and standards while promoting awareness across the organization. The CISO collaborates closely with senior management to ensure compliance with regulatory requirements and corporate policies, delivering high-quality security solutions and risk assessments.

Responsibilities

• Develop and lead the Information Security Program, ensuring the confidentiality, integrity, availability, and recovery of information assets.
• Create, implement, and regularly update a strategic security program aligned with industry standards and evolving threats.
• Define and manage security policies, standards, and controls to ensure compliance with privacy laws and regulations.
• Oversee identity and access management, including documentation of access authorizations and segregation of duties.
• Maintain awareness of industry threats and engage with external agencies to enhance security posture.
• Manage regulatory audits and compliance, ensuring timely remediation of findings or acceptance of organizational risk.
• Regularly report security program status, risks, and trends to the Board and Senior Management.
• Oversee the Business Continuity Program (BCP), Business Impact Analysis (BIA), and Disaster Recovery (DR) testing.
• Manage incident response and coordinate with law enforcement as needed.
• Evaluate and manage vendors to support security objectives within budgetary constraints.
• Lead hiring, training, and performance management within the information security team.

Requirements

• Bachelor's degree in Business, Information Technology Management, or related disciplines.
• 10 or more years of IT management experience.
• Recognized Information Security Certifications (e.g., CISSP, CISA, CISM, CRISC).
• 7 or more years of directly related information security leadership experience.
• 3 or more years of experience interacting with Senior Management, Supervisory Committees, and/or Board of Directors.
• Proficiency in MS Office products such as Excel, Word, PowerPoint, Outlook, and Office365.
• Master's Degree in Business or Technology and experience in a financial institution preferred.

Nice-to-haves

• Experience in fraud, enterprise risk management, compliance, or enterprise governance.