Director, Information Security

Lead BluPeak Credit Union's enterprise information security program and serve as its Information Security Officer. Oversee cybersecurity strategy, policies, risk assessments, regulatory alignment, vendor security, and training while advising senior leaders and governance committees. Protect member data and business systems and report program status, risks, and initiatives to the Board.

Responsibilities

• Develop and mature a cybersecurity program aligned with business goals, risk frameworks, regulations, and industry standards.
• Maintain and administer information security policies, procedures, and the overall security program.
• Conduct security risk assessments, identify vulnerabilities, and coordinate prioritized remediation.
• Prepare and present annual information security reporting and risk updates to the Board and governance committees.
• Monitor security metrics and key risk indicators, and provide input on the security budget.
• Partner with technology, business, and third-party risk teams to oversee vendor security, training, and emerging technology risks.

Required Skills

• Cybersecurity program governance
• Information security policy development
• Security risk assessment
• Vulnerability management
• Regulatory compliance
• NIST framework
• CIS controls
• PCI security standards
• Third-party risk management
• Security metrics and reporting