Information Security Governance Officer

Role:
By emphasizing ONE Park, ONE mission, ONE team, the Information Security Governance Officer serves as Park's designated Information Security Officer, reporting to the VP of Risk and providing independent oversight of information security and cybersecurity risks across the organization. This position leads the Credit  Union's Information Security Program by establishing security requirements, assessing risks, evaluating controls, monitoring compliance, tracking remediation, and escalating material concerns. The role also oversees third-party information security risks, incident response governance, and regulatory compliance while collaborating with Information Technology. The officer regularly reports information security risks, trends, and program effectiveness to management and relevant governance committees.

Essential Functions & Responsibilities:

Performance Measurements:
1. To be an ambassador of Park's culture supporting the credit union's mission to build thriving communities together ensuring words and actions align with the Park VIBE that defines our Core Values: • Vibrant Connections • Inclusive Excellence • Bold Compassion • Endless Empowerment
2. To provide friendly, professional and accurate service and support to all members and coworkers.
3. To provide independent oversight of the Credit Union's Information Security Program by identifying, assessing, monitoring, and reporting information security risks, evaluating compliance with established security requirements, and ensuring material deficiencies and exceptions are appropriately documented, tracked, and escalated.
4. To maintain documentation as required for tracking and audit review.
5. To oversee information security risks associated with third-party service providers and incident response preparedness, ensuring appropriate due diligence, risk assessments, incident response procedures, and corrective action monitoring are maintained in accordance with the Credit Union's established security standards.
6. To maintain a professional work environment, promote teamwork, build respect among coworkers and present a businesslike appearance.
7. To follow all security policies and procedures and report discrepancies or suspicious activity to manager immediately.

Knowledge and Skills:
Experience Five to seven years of progressively responsible experience in information security, cybersecurity, information technology risk management, security governance, or a closely related field.
Education (1) A bachelor's degree; or (2) industry-recognized professional certifications, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Information Systems Auditor (CISA), in lieu of a degree.
Interpersonal Skills Work involves much personal contact with others inside and/or outside the organization for the purpose of first-level conflict resolution, building relationships, and soliciting cooperation. Discussions involve a higher degree of confidentiality and discretion, requiring diplomacy and tact in communication.
Other Skills 1. Knowledge of office equipment, word processing, spreadsheet, e-mail, personal computers, PC operating systems, etc. 2. Must be able to work and travel independently and use general office equipment. 3. Knowledge of cybersecurity technologies and security controls, including anti-malware, MDR/XDR, firewalls, and other security solutions, with the ability to assess associated risks and control effectiveness. 4. Understanding of network security principles, IT infrastructure, and cybersecurity frameworks sufficient to evaluate information security risks and provide independent oversight.

Physical Requirements

PHYSICAL DEMANDS The physical demands described here are representative of those required to successfully perform the essential functions of this position, but do not necessarily constitute an exhaustive list of all essential functions. To the extent required by any applicable law, reasonable accommodations will be made to enable qualified individuals with disabilities to perform essential functions where this can be done without posing a direct threat to self or others. While performing the essential duties of this position, the employee frequently must sit, stand, and walk short distances. The employee frequently uses hands and fingers to count currency and handle, manipulate, and feel objects, documents, and office tools and equipment. Reads, writes, listens, speaks, and uses personal computers, copiers, telephones, and other office equipment and software throughout the work day. The employee is occasionally required to stoop, bend, squat, and reach overhead with hands and arms. Occasionally pushing and pulling of office furniture and other objects. The employee may occasionally lift and/or move up to 15 pounds and on occasion lift and/or move up to 25 pounds.