Information Security Officer

Description
We are looking for an experienced Information Security Officer to lead a bank's technology risk, information security, and vendor oversight efforts in Winsted, Connecticut. This role will guide the development of enterprise security practices, strengthen risk governance, and provide clear reporting to senior leadership and the Board. The ideal candidate brings strong judgment in cybersecurity, regulatory alignment, and incident response while fostering a security-aware culture across the organization.

Responsibilities

Lead the design, execution, and ongoing enhancement of the bank's information security and third-party risk programs, including supporting policies, standards, procedures, and governance tools. Direct technology, cybersecurity, and vendor risk evaluations, partnering with business units to analyze exposures and assess operational impact in support of continuity planning. Assess emerging threats and control effectiveness using recognized security methodologies and benchmark the program against established industry frameworks.

Oversee key security operations such as access review activities, network oversight, external penetration testing coordination, vulnerability follow-up, and secure data disposal practices. Create meaningful dashboards and executive-level reporting that communicate risk posture, program progress, and assessment outcomes to committees, senior management, and the Board of Directors. Champion organization-wide security awareness through employee onboarding, targeted communications, phishing follow-up, and tailored education for internal and external stakeholders as needed.

Act as the primary liaison for technology audits and regulatory reviews by coordinating documentation, organizing responses, and driving corrective actions to completion. Track changes in state and federal regulatory expectations, including privacy and security obligations, and recommend program updates based on evolving requirements and industry standards. Requirements
5+ years of experience in information security, cybersecurity leadership, or technology risk management. Demonstrated knowledge of security frameworks and standards, including NIST and SOC-related control environments.

Experience building or managing information security programs, policies, and compliance-driven processes. Strong background in cybersecurity incident handling, triage, resolution, and response coordination. Familiarity with vendor risk management, vulnerability remediation, and security assessment practices. Expertise in developing cybersecurity strategy and aligning controls with regulatory expectations. Relevant security certification such as CISSP is preferred.

Excellent communication skills with the ability to present technical risk matters to executives, committees, and board-level audiences. Technology Doesn't Change the World, People Do. Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. Robert Half works to put you in the best position to succeed.

We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan.

Visit roberthalf.gobenefits.net for more information.
2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.