Job Detail

Have you built, operated, fixed, and defended security programs hands-on and are now leading information security and data privacy at a strategic level? This role is for a security leader who did not come up through theory or consulting alone. You have personally managed incidents, audits, controls, and regulatory examinations. You understand what actually breaks because you have been the one fixing it.

Financial Partners Credit Union is seeking a Vice President of Information Security & Data Privacy to join its IT Infrastructure team in developing and executing the credit union's information security, data privacy, and cyber risk strategy. Reporting to the Chief Operating Officer and working closely with the Chief Information Officer, Information Security Steering Committee, and Executive Management Team, this role ensures the protection of data, systems, applications, and infrastructure across the enterprise.

As Vice President of Information Security & Data Privacy, you will own the organization's security and privacy posture end to end. You will translate real-world operational experience into enterprise-level strategy, governance, and executive guidance, setting direction, influencing leadership decisions, and ensuring security and data protection are practical, compliant, and aligned with business realities.

What You'll Do/Requirements:

• Perform Tier-1 tasks on Information Security technologies, to maintain and manage annual updates and revision to security and privacy policies
• Evaluate business activities (e.g. investments, assets, processes) to assess compliance risk to NIST CSF and Credit Union standards
• Participate in building or maintaining Fraud Detection processes, including technology
• Partner with IT, Risk and Legal to ensure secure development, infrastructure, and operations
• Provide or coordinate with internal and external audit to advise on and remediate all gaps from reviews, audits, policies, procedures and practices as it aligns to information security and data privacy
• Develop and implement an effective ISMS (Information Security Management System) and Data Privacy compliance program
• Support and maintain ISMS, NIST CSF Framework, GDPR, CCPA (and additional states or country privacy laws), PCI-DSS internal controls and monitor adherence to them
• Proactively document and review processes, practices and documents to identify weaknesses and risks
• Identify and evaluate the organization's data processing activities for PCI-DSS
• Conduct annual Data Protection Impact Assessments (DPIAs)
• Participate in annual Business Continuity/Disaster Recovery and Incident management testing to written plans
• Manage Incident and Privacy breaches, incidents and potential incidents, including reviews of flaw remediation
• Arrange or conduct training on Data Privacy and Security Awareness compliance training for employees and contractors (including vendors where not aligned or provided)
• Build and lead executive-level communications on security posture, emerging threats, and strategic initiatives
• Ability and experience communicating to external auditors

What We Are Looking For/Requests:

• Bachelor's degree in Computer Science, Computer Information Systems, or any relevant Business degree with additional technical & security related certifications
• 5+ years' senior leadership experience as a Information Security, Compliance Officer or Compliance Manager
• 5+ years' experience in Linux, Windows and Cloud (Microsoft, Google, AWS) technologies, as well as security tools (IDS/IPS, DLP, SIEM, EDR/MDR, Firewall)
• Knowledge of various security methodologies and processes, and technical security solutions
• Solid knowledge of Data Privacy and data protection laws
• Familiarity with physical security systems and controls
• Ability to handle and classify confidential and restricted information

Nice to haves/Enhancements:

• Bachelor's degree in one of the following:
  • Information Systems
  • Computer Science
  • Information Technology
  • Management Information Systems (MIS)
  • Cybersecurity
• CISA certification, Network Security certification or relevant InfoSec certifications
• Agile experience
• Experience championing a security program
• Professional certification (e.g. Compliance & Ethics Professional, Leadership ) is a plus
• Broad yet mostly expert understanding of information security and the application of controls across a diverse infrastructure and management organization
• Excellent planning, organizational, written and verbal communication skills
• Self-starter capabilities with the ability to work with independently to drive results

The pay range for this position is listed above. Our pay ranges are designed to allow for candidates with various levels of experience and skill to be considered, and to allow room for growth to be achieved in a role over time. Generally, new hire salary offers fall within the minimum to midpoint of a pay range for many candidates. Any offer extended to a candidate will be based upon their individual combination of experience, knowledge, skills, and education as well as internal equity.

Financial Partners Credit Union is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.