Information Security Manager (Hybrid)

Summary

The Manager, Information Security is responsible for leading the design, implementation, and management of Summit Credit Union's cybersecurity strategy and program. This role provides oversight for the security of all information systems and data, ensuring regulatory compliance, managing risk, and responding to evolving threats. Reporting to the Information Security Officer, the Manager plays a key role in shaping the organization's security posture, leading staff, and collaborating across departments to protect member information and organizational assets.

What You'll Do:

• Summit maintains a robust cybersecurity program that aligns with business goals and evolves with threat landscapes.
• Enterprise security policies, standards, and controls are updated, communicated, and enforced to meet compliance and risk mitigation objectives.
• Executive leadership and board receive regular, clear reports on material cybersecurity risks, incidents, and mitigation efforts.
• Security awareness is embedded in organizational culture through engaging training and communication strategies.
• Productive collaboration exists between internal departments (IT, risk, compliance, audit) and external vendors to support security objectives and audits.
• Emerging risks and vulnerabilities are identified, assessed, and addressed through formalized risk management and response protocols.

What You'll Bring:

• Bachelor's degree in IT, Cybersecurity, or a related discipline.
• Minimum 6 years of progressively responsible experience in security, networking, or related IT fields; at least 2 years in a leadership role.
• Professional certifications such as CISSP, CISM, or equivalent preferred
• Consideration given to applicants with a combination of applicable work experience, education, and certifications.
• Demonstrated success in leading cybersecurity initiatives and managing teams, programs, or large-scale projects.
• In-depth understanding of security frameworks (e.g., NIST, CIS Controls) and regulatory guidance (e.g., FFIEC, NCUA).
• Experience managing enterprise security tools, including SIEM, endpoint protection, IDS/IPS, DLP, and vulnerability management platforms.
• Proven experience handling security incidents, audits, and risk assessments.
• Effective communicator with the ability to convey complex topics to technical and non-technical audiences.
• Strong skills in policy development, documentation, and cross-functional coordination.
• Familiarity with cloud security and identity and access management (IAM) solutions.

Additional Details

Physical Demands

While performing the duties of this position, the employee is required to sit, stand, walk, and use hands and fingers. The employee may occasionally reach above and below shoulder level and lift, push, pull, and/or carry up to 10 pounds.

Environmental/Working Conditions

Work is performed in a typical administrative setting with climate control and appropriate lighting. Travel to branch locations may require exposure to outdoor and traffic conditions.

Equipment Used

A variety of office equipment, including telephone, printer, PC, and mobile devices.

Our Commitment

At Summit Credit Union, we are committed to providing Equal Employment Opportunity regardless of race, color, religion, sex, age, national origin, disability, military and veteran status, sexual orientation, gender identity, marital status, or any other characteristic protected by local, state, or federal law. We embrace diversity and believe that inclusion is critical to our success as a credit union. Different makes us better. Employment decisions are made based on qualifications, merit, and business need.

The above information on this description has been designed to indicate the general nature and level of work performed by employees in this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all outcomes, responsibilities and qualifications required of employees assigned to this job.