If you are ready to join a company that truly cares about its employees, our members, and our community then you have come to the right place!

Summary of Role:

The VP Cyber Assurance will have a broad range of responsibilities to ensure Broadview FCU (BFCU) maintains an efficient and effective Cybersecurity Assurance program including Identity and Access Management that supports BFCU's mission and goals. The VP will shape and mature offensive and defensive cybersecurity programs and deliver top security initiatives that both enable our business goals and protect our members and assets. The VP will also be accountable for building and maintaining an identity and access management program to manage user and account access. The role will need technical prowess to manage security tools, understand security risks, and prioritize mitigation efforts and communication skills to inform the right people.

This role requires a highly technical individual but also an individual that has many years of experience managing a program to be able help an immature program mature.

Essential Job Functions/Responsibilities:

Provide oversight of the cyber assurance risk function including defensive and offensive functions and identity and access and management.
Continually improve the cybersecurity program including vulnerability management, technical reviews, security tool road mapping, early warning SEIM monitoring policy, CIRT incident response, red team/purple team, forensic investigations, deception techniques, account management and role-based access.
Develop meaningful security reporting and key security health metrics to best allocate resources and manage risk.
Identity cyber security risk recommend remediation and anticipate new cyber security threats and identify the impact threats would have and prioritize mitigation efforts.
Manage assessments including penetration testing, maturity assessments and assessments to measure the strength of our control structure.
Develop process for working on corporate projects that ensures technical security assessment that enables innovation and the protection BFCU members, reputation, and assets.
Identify key emerging risks, assess their potential impact on BFCU, and facilitate risk mitigation with appropriate business units.
Assess, select, and implement a user access provisioning system to efficiently and effectively manage the risk related to user access including considerations such as role-based access, least privilege and segregation of duties.
Centralize user access based on risk and application criticality to the corporation and develop an identity and access management program.
Lead and develop a team of technical security practitioners that understand cybersecurity and risk in context with BFCU operating environment and business goals.
Communicate inherent security risks and solutions to technical and non-technical business owners in terms bus.
Enhance the CIRT incident program to include a documented process, communication plans, named team members, training for team members, regular testing and run books to enhance our capabilities to respond.
Analyze and recommend security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitor for compliance.
Anticipate new cyber security threats and identify the impact the cyber security threats would have on the technologies used within the Credit Union.
Maintain technical and professional knowledge by attending educational workshops and training, obtaining relevant professional certifications, reviewing professional publications and books, establishing personal networks, participating in professional associations, and staying informed of any legal, policy and procedural changes relating to Risk Management functions as well as Information Security.

Minimum Job Qualifications:

5+ years relevant experience either as a VP equivalent a security position in a highly regulated industry such as financial services or health care.
10+ years of direct information security experience in a financial services company or other highly regulated industry and complexity required to perform duties effectively.
10+ years managing a highly technical security staff including the ability to perform technical forensics investigations, ethical hacking and SEIM analysis.
Experience with the current financial service's regulatory environment.
Broad knowledge of federal laws and regulations with respect to security and technology.
Security certifications: Have one or more security certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH).
Technical expertise: Must have technical expertise in the following network security, application security, encryption, cloud security, IaaS environments, specifically (AWS), Salesforce Shield, SEIM management, identity and access provisioning systems, advanced security tools, Microsoft 365 E5, DevSecOps and AI usage in security.
Penetration testing, red teaming, and purple team experience.
Excellent verbal and written communication skills with the ability to communicate effectively across various departments and levels of the organization.
Ability to stay informed of changes in all information security topics and laws and implement changes in a timely manner.
Must have proven ability to prioritize projects and weigh the risks and rewards of impact on the credit union.
Excellent leadership and time management skills required.
Proficient in Microsoft Office (Outlook, Word, Excel, PowerPoint)
Able to perform essential duties as a strategic business partner to peers and senior management, be seen as a trusted advisor.
Must possess ability to influence others and provide guidance and consultation as a subject matter expert.

Starting Compensation: $220,000-$250,000, plus a competitive benefits package.

Bilingual individuals who are fluent in a second language in addition to English are highly encouraged to apply.

We are an equal opportunity employer. We do not discriminate on the basis of race, creed, color, national origin, religion, sex, age, veteran status, disability, genetic information, gender identity, or any other protected class.

Broadview FCU is committed to ensuring individuals with disabilities and/or those who have special needs participate in the workforce and are afforded equal opportunity to apply and compete for jobs. If you would like to contact us regarding the accessibility of our Website or need assistance completing the application process, please contact us at talentacquisition@broadviewfcu.com

Broadview Federal Credit Union jobs

VP, Cyber Assurance