Apply on Employer Site

Financial Partners Credit Union · 5 months ago

Vice President Information Security & Data Privacy

Costa Mesa, CA

Full-time

Onsite

Mid, Senior Level

5+ years exp

Financial Partners Credit Union is seeking a Vice President of Information Security & Data Privacy to join its IT Infrastructure team in developing and executing the credit union’s information security, data privacy, and cyber risk strategy. This role involves owning the organization’s security and privacy posture, translating operational experience into enterprise-level strategy, and ensuring compliance with various security frameworks and regulations.

BankingFinancial ServicesLendingNon Profit

Comp. & Benefits

Responsibilities

Perform Tier-1 tasks on Information Security technologies, to maintain and manage annual updates and revision to security and privacy policies

Evaluate business activities (e.g. investments, assets, processes) to assess compliance risk to NIST CSF and Credit Union standards

Participate in building or maintaining Fraud Detection processes, including technology

Partner with IT, Risk and Legal to ensure secure development, infrastructure, and operations

Provide or coordinate with internal and external audit to advise on and remediate all gaps from reviews, audits, policies, procedures and practices as it aligns to information security and data privacy

Develop and implement an effective ISMS (Information Security Management System) and Data Privacy compliance program

Support and maintain ISMS, NIST CSF Framework, GDPR, CCPA (and additional states or country privacy laws), PCI-DSS internal controls and monitor adherence to them

Proactively document and review processes, practices and documents to identify weaknesses and risks

Identify and evaluate the organization’s data processing activities for PCI-DSS

Conduct annual Data Protection Impact Assessments (DPIAs)

Participate in annual Business Continuity/Disaster Recovery and Incident management testing to written plans

Manage Incident and Privacy breaches, incidents and potential incidents, including reviews of flaw remediation

Arrange or conduct training on Data Privacy and Security Awareness compliance training for employees and contractors (including vendors where not aligned or provided)

Build and lead executive-level communications on security posture, emerging threats, and strategic initiatives

Ability and experience communicating to external auditors

Qualification

Information Security ManagementData Privacy ComplianceIncident ManagementNIST CSF FrameworkCloud TechnologiesSecurity ToolsData Protection LawsAudit CoordinationAgile ExperienceLeadership ExperienceCommunication SkillsOrganizational SkillsSelf-starter Capabilities

Required

Bachelor's degree in Computer Science, Computer Information Systems, or any relevant Business degree with additional technical & security related certifications

5+ years' senior leadership experience as a Information Security, Compliance Officer or Compliance Manager

5+ years' experience in Linux, Windows and Cloud (Microsoft, Google, AWS) technologies, as well as security tools (IDS/IPS, DLP, SIEM, EDR/MDR, Firewall)

Knowledge of various security methodologies and processes, and technical security solutions

Solid knowledge of Data Privacy and data protection laws

Familiarity with physical security systems and controls

Ability to handle and classify confidential and restricted information

Preferred

Bachelor's degree in one of the following: Information Systems, Computer Science, Information Technology, Management Information Systems (MIS), Cybersecurity

CISA certification, Network Security certification or relevant InfoSec certifications

Agile experience

Experience championing a security program

Professional certification (e.g. Compliance & Ethics Professional, Leadership ) is a plus

Broad yet mostly expert understanding of information security and the application of controls across a diverse infrastructure and management organization

Excellent planning, organizational, written and verbal communication skills

Self-starter capabilities with the ability to work with independently to drive results