Description

The Chief of Information Security (CISO) is responsible for establishing and maintaining the overall information security program within the Bank. The CISO is responsible for providing leadership, strategic direction, and guidance to ensure the confidentiality, integrity, and availability of the Bank's information assets. The CISO oversees the development and implementation of information security policies, procedures, and controls and ensures compliance with industry regulations and standards.

Note: We are considering candidates from all locations and are open to remote talent. However, we have a preference for candidates located in the Sacramento area. Should we move forward with a local candidate, the position would follow a hybrid work arrangement, combining both in-office and remote work.

Essential Functions

• Develops and implements a comprehensive information security program, including policies, procedures, and controls.
• Monitors and urgently addresses current and emerging cybersecurity risks that pertain to the Bank and its customers. Advises the Bank's Chief Risk Officer, IT Committee, and Senior Management in developing and implementing information technology safeguard strategies and controls to mitigate risks.
• Conducts ongoing information security compliance monitoring and performs IT and customer information risk assessments for all areas of the Bank.
• Monitors and continuously upgrades information security and business resiliency capabilities across the enterprise.
• Manages enterprise-wide Business Continuity Planning (BCP), including establishing and validating policies and procedures to restore business-critical services of the Bank in the event of a disaster or event.
• Works closely with and challenges the Director of Information Technology and the Chief Risk Officer to develop strategic plans and makes recommendations for significant information technology projects involving functional changes within the Bank.
• Provides the Board with an annual assessment of the Bank's Information Security program in accordance with the Gramm Leach Bliley Act.
• Assures audit compliance and procedure quality control through internal and external reviews, recommends and initiates corrective actions, and ensures system resources are in compliance with established Bank policies, procedures, and state and federal laws, rules and regulations.
• Manages physical security policies, protocols, procedures, and systems. Ensures policies and procedures are consistently applied across the Bank and ensures adherence with regulatory requirements.
• Continuously monitors and assesses the information security team and resources to ensure the organization employs and develops top talent.
• Performs personnel actions, including performance appraisals, disciplinary actions, and interviewing candidates for employment, and supervises the daily activities of the department, including, but not limited to, effective delegation of assignments, developing work schedules, and providing necessary training.
• Fosters a culture of security awareness and accountability throughout the organization. Works with the Training Officer to develop and deliver security awareness and training programs to educate employees on security best practices.
• Supports Community Reinvestment Act (CRA) through business development efforts. Actively participates in community organizations.
• Maintains a current knowledge of bank regulations. Ensures compliance with all Federal, State and Bank policies, procedures, and regulations.
• Other duties as assigned.