Vice President, Cybersecurity

This is a fully remote position, open to applicants in Montana, +2 more states.

📋 Description

• Develop and spearhead the enterprise cybersecurity strategy, roadmap, policies, and governance framework in alignment with the credit union’s risk appetite and business objectives.

• Oversee information security risk management, which includes conducting risk assessments, evaluating control maturity, tracking issue remediation, and ensuring compliance with regulatory expectations.

• Establish and manage an enterprise cybersecurity assessment and assurance program that encompasses periodic internal security evaluations, independent third-party assessments, penetration testing, vulnerability assessments, and reviews of security maturity.

• Lead regulatory, audit, and board reporting related to security, including providing updates on cybersecurity posture, incidents, third-party risks, and emerging threats.

• Create and oversee the credit union’s third-party cybersecurity risk management program, which includes establishing due diligence standards, conducting control reviews, defining contract security provisions, and ongoing monitoring.

• Offer executive oversight for Identity and Access Management (IAM), cloud, and security architecture standards.

• Manage cybersecurity incident response at the executive level, including escalation processes, tabletop exercises, post-incident reporting, and lessons learned.

• Direct Business Continuity, Disaster Recovery, and Cyber Resilience planning initiatives.

• Lead efforts in AI and data governance pertaining to cybersecurity, focusing on the secure use of AI tools, coordinating model oversight, implementing data protection controls, and meeting governance expectations.

• Collaborate with Digital Delivery, Infrastructure, Risk, Compliance, Internal Audit, Legal, and business leaders while ensuring independent cybersecurity oversight.

• Supervise the Security Operations Manager to guarantee effective execution of daily operational security tasks.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, information systems, computer science, business, or a related discipline; advanced degree is preferred.

• A minimum of 10 years of progressive experience in cybersecurity, including senior leadership roles in financial services or another regulated industry.

• Proven experience in security strategy, governance, incident response, identity management, cloud security, third-party risk, and board/regulatory reporting.

• Strong understanding of financial services control expectations and frameworks such as FFIEC, GLBA, NIST, and associated regulatory guidance.

• Demonstrated ability to articulate technical risk in clear business language to executive leadership and board members.

• Relevant certifications are preferred, such as CISSP, CISM, CRISC, or equivalent credentials.

🏝️ Benefits

• Excellent health insurance options, including a Health Reimbursement Account alternative.

• Life, AD&D, Short-Term Disability, and Travel Insurance coverage.

• 401k plan featuring a company match dollar-for-dollar up to 6 percent.

• Generous time-off policy that includes paid time off (PTO), volunteer time off (VTO), birthday PTO, and company-observed holidays.

• Monthly wellness activity stipend and mental health support.

• Tuition reimbursement opportunities.

• Pet Benefits, encompassing insurance, discounts, “pawternity” PTO days, and more.

• Bonus/commission structures for eligible roles.

• Employee perks, including mortgage discounts.

• PTO purchase and sell-back programs.

• Rewards and peer recognition initiatives.

• A trust-based, outcome-oriented remote work environment for most positions, effective after 6 months of service.