Director Information Security

The Director, Information Security position serves in both an advisory and management role. This position provides the Board and Executive leadership with independent reporting over production information security matters, to include Information Technology: audit and examination findings and responses, threats and risks, incidents and outcomes, and overall information security program health as measured against the Board’s and Executive Leadership’s goals and risk tolerance. This position oversees logical security, cybersecurity, incident response, risk management, business impact analysis doctrine, investigations, disaster recovery and business continuity programs. Serves as an escalated point of contact for all activities related to IT security and technology risk.

This position is based out of our Abbott Headquarters (1941 Abbott Rd.) and is open to a remote/hybrid schedule.

Pay Range: $124,387/yr. - $188,242/yr.

ESSENTIAL JOB FUNCTIONS:

• Manages the credit union’s information security program, ensuring appropriate safeguards are in place and regularly tested to protect information assets from internal and external threats.
• Oversees and actively manages the Incident Response, Business Impact Analysis, Risk Management, Disaster Recovery, and Business Continuity Programs.
• Ensures safeguards, controls, and monitoring are in place to reduce and deter fraud in collaboration with Compliance and Data Analytics resources.
• Assesses security risk through qualitative risk analysis on a regular basis, conducting functional and gap analyses to evaluate and recommend new information security counter measures against threats to mitigate risk.
• Performs regular reviews of information security policies and procedures. Makes recommendations for changes to policies and procedures to ensure that they remain compliant with regulatory changes and industry best practices and accommodate new products and activities approved for implementation.
• Conducts regular reviews and forensic analysis of IT systems to identify suspected or attempted breaches, or policy and procedure violations have occurred, and determines the extent of any damage caused by such incidents.
• Manages an Insider Risk program to detect whether credit union resources and technology are being misused or exposing the organization to elevated levels of risk. Prepares periodic information security management reports for the IT Steering Committee and/or Board of Directors.
• Serves as the primary point of contact for information requests relating to the credit union’s information security program from credit union management, auditors, and examiners.
• Provides input and performs risk assessments for new vendors, significant changes to the IT infrastructure, as well as periodic information security risk assessments on critical products.
• Partner with colleagues across Credit Union 1 to foster a culture of security, promote shared accountability, and continuously strengthen security practices, awareness, and technology risk management in all aspects of the business.

ADDITIONAL RESPONSIBILITIES:

• Demonstrates support for the corporate mission, vision, and values.
• Maintains a positive working relationship with department personnel, including management, supervisory, and all other employees.
• Meets the current standards as established for the department in the completion of all assigned duties.
• Community service is required of all management staff. While some may occur during work hours with the permission of the President, some must also occur outside of normal working hours, at a minimum of twice per year. Community service is defined as serving on a non-profit board of directors, and participation in other social services events. In addition, attendance at management mandated events will be required.
• Responsible for the department’s participation in every aspect of the Record Retention program. This includes the creation, identification, use, storage, and destruction in accordance with the policy.
• Performs other duties as assigned.

QUALIFICATIONS:

Master’s degree in related field (e.g. information systems, computer science, etc.) or equivalent experience preferred. Job experience commensurate to educational equivalent will be considered. Minimum of ten years of experience in IT security operations or IT auditing required. Knowledge of information security hardware, software and practices that comply with current industry standards. Excellent written and oral communication skills and the ability to communicate technical and security related concepts to both technical and non-technical individuals. Completion of or active pursuit of certification for CISA, CISM or CISSP desired. Must be available for a flexible work schedule including weekends, nights and holidays. Responsible for abiding and complying with the policy for compliance with the Bank Secrecy Act and anti-money laundering laws and regulations (BSA/AML) and the policy for compliance with office of foreign assets control laws and regulations (OFAC).

BENEFITS AT CU1:
At Credit Union 1, we believe in life balance, which means supporting our employees both at work and when away. Eligible positions enjoy a comprehensive benefits package designed to promote overall wellbeing- financially, professionally and personally.

Health & Wellness
Credit Union 1 offers employees multiple medical plans to choose from, including PPOs and HSA-qualified plans, as well as dental, vision, and services to support overall mental and physical health.

Financial Security
Employees and their families are supported in life planning with employer-paid life insurance, disability coverage, and AD&D coverage. Voluntary plans are offered to cover critical illness, accidents, and hospital indemnity expenses. Employees participate in 401(k) retirement plan with company matching contributions and profit-sharing contributions.

Additional benefits support our employees' lifestyle and family, with generous paid time off, access to CU1's accredited early learning center in Anchorage, Alaska, employee loan and mortgage discounts, education assistance, volunteerism and community engagement opportunities within the communities we serve.

Only applicants who meet the minimum requirements for this position will be considered for an interview. This position closes on 11/17.

To be eligible for this position, applicants must be legally authorized to work in the United States without restriction. Credit Union 1 does not provide visa sponsorship.

Please note: Credit Union 1 does not provide relocation assistance. If selected for an on-site position, candidates will be responsible for relocating to Alaska prior to the agreed upon start date at their own expense.

Thank you for your interest in this opportunity with Credit Union 1!

Background Screening Statement: Candidates selected for a position at Credit Union 1 will be subject to a criminal background check prior to their employment. An offer of employment may be rejected or terminated based on receipt of an unacceptable background screening.

EEO Statement: Credit Union 1 provides equal employment opportunities to all employees and applicants for employment, prohibiting discrimination and harassment of any type without regard to race, color, religion, sex, age, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identify or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

E-Verify Statement: Credit Union 1 participates in E-Verify and will provide the federal government with your form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, Credit Union 1 is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before Credit Union 1 can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer an completed the Form I-9. For more information on E-Verify, or if you believe that Credit Union 1 has violated its E-Verify responsibilities, please contact DHS at 888-897-7781 or dhs.gov/e-verify.com