Vice President Information Security and Infrastructure

If you join our team, here are some of the perks you can expect:

• A competitive total rewards package with 4 weeks paid time off for full-time employees, work anniversary paid time off, paid volunteer time off, and 12 paid holidays
• Comprehensive medical, dental, and vision plans with employer contributions to supercharge your Health Savings Account
• Up to a 4% match on 401(k) contributions
• Up to twelve weeks of fully paid parental leave
• An extensive Employee Assistance Program that provides personalized care options for your whole household
• Ample opportunity to learn, develop and grow with access to LinkedIn Learning, career and leadership development programs, job shadowing, a mentor program, and tuition reimbursement up to $5,250/year

Location

• Hybrid: Employees who are able to perform the essential functions of their jobs away from an Elevations location may do so with the expectation that they are onsite at least fifty percent of the time over a two-week pay period.

Summary/Objective

 The VP of Information Security & Infrastructure is responsible for implementing, maintaining, and overseeing Elevations Credit Union’s (ECU) IT security and infrastructure programs. This includes the governance, management, and advisement of cyber security efforts, strategic vision, and systems engineering across the organization. This role is accountable for executing and delivering on all IT Security and Infrastructure projects. This position leads security risk assessment efforts, oversees the design, implementation, and operation of controls to mitigate known risks, and reduces vulnerabilities that would create exposure to ECU or Members’ data. Additionally, this role is responsible for the strategic direction and leading management of the Infrastructure team, ensuring the reliability, scalability, and performance of ECU’s systems and networks. Ensures the information security and infrastructure programs follow industry best practices, adhere to all federal and state laws and regulations governing and applicable to the Credit Union, including the Bank Secrecy Act, and align with company stakeholder needs and expectations.

c. Essential Functions.

• Performs risk assessments, sets strategy and operating model, provides program updates, and advises C-Suite & Board of Directors on all matters pertaining to information security and infrastructure, including regulatory audits, and their potential impact to the business and its stakeholders.
• Responsible for the maintenance, enhancement, and monitoring of a strategic, risk management-based, information security and infrastructure program to ensure the integrity and confidentiality of information assets and the reliability of systems.
• Oversees and leads direction of the Infrastructure team responsible for systems engineering, ensuring the reliability, scalability, and performance of ECU’s systems and networks.
• Functions as a thought leader and change agent to the organization and leads the design and acquisition of advanced security controls and infrastructure solutions.
• Maintains information security risk and vulnerability management, including leading and coordinating security incident response in prevention, investigation, mitigation, and reporting activities.
• Oversees outside consultants for independent security audits, engagements and monitoring, including regular penetration and vulnerability testing.
• Prepares and coordinates the security and infrastructure sections of the Credit Union regulatory audits.
• Responsible for providing Information Security and Infrastructure metrics to the board and executive leadership.

Reports To

Chief Technology Officer (CTO)

Manages:

Information Security Analyst(s), Information Security Engineer(s), Systems Engineer(s), Network Engineers(s)

Required Skills, Education and Experience

• BS/BA in Computer Science, Information Systems Management, Business Administration, Risk Management, or a related field
• Ten (10) or more years of hands-on technical experience securing and administering networks, firewalls, intrusion detection and analysis, authentication methods, encryption, vulnerability management
• Ten (10) or more years of demonstrated leadership experience with policy and program management
• Ability to lead and motivate cross-functional, interdisciplinary teams
• Proven experience building credibility and collaborating with senior business leaders, internally and externally, and the ability to communicate technical concepts to non-technical audiences
• Strong knowledge of regulatory rules, standards and best practices that govern information security in the financial services industry, such as NIST, FFIEC/NCUA, BSA and related privacy laws
• Certification as a Certified Information Security Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• Relevant experience managing security for companies that leverage modern, industry-leading technologies, Agile methodology, and ITIL

Preferred Skills, Education and Experience

• Experience working in the financial services industry, preferably for a credit union or bank

Work Environment

Elevations uses multi-factor authentication to keep our data safe. As such, a personal smartphone is a requirement for employment with us. This job operates in an office setting and routinely uses standard office equipment.

Physical Requirements

• All other positions: Sitting frequently, walking occasionally, use of hands frequently, hearing constantly, talking frequently, exerting up to 10 lbs of force occasionally to lift, carry, push, pull, or move objects

Position Type/Expected Hours of Work

Full time / 40 hours per week

Compensation information:

The person hired into this position will likely earn between $‎162,032.00 and $‎216,042.66

Actual compensation offered may vary from the posted hiring range based on factors such as relevant experience, time in role, base salary of internal peers, prior performance, business sector, licensure requirements and/or skill level, and will be finalized at the time of offer.

Anticipated Application Window:

This role is anticipated to close within 45 days from the date of posting. However, if the position has not been filled, Elevations may keep the application period open longer.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.