Job Type

Full-time
Description
Overview : Listerhill Credit Union is a financial cooperative whose primary purpose is to help our members live financially healthy lives. In 1952, seven Reynolds Metals employees deposited $5 each with the idea of starting a credit union that was member-owned and member-focused. Helping co-workers break from predatory lenders to borrow affordably and save for their financial futures was their motivation. We have grown from a single office at Reynolds Metals to 18 branches throughout northwest Alabama and south-central Tennessee. Today, we serve 14 counties with a full line of financial solutions. Our purpose and commitment to financial health has never changed. We recognize what is good for our members is good for us. We aspire to high standards of integrity, excellence, and passion. Furthermore, we strive to be innovative for the members' benefit and engaged in the betterment of their communities.
The Role : Your efforts and ultimate successes should be measurable and recognizable as you strive daily within LCU's vision: "to value people over profit, proactively seek improvement, work passionately, exceed expectations, and make our community a better place". The Information Security Officer serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of member and business information in compliance with the Credit Union's information security policies, standards and procedures. This position is responsible for maintaining and enhancing a corporate-wide information security management program to ensure that information assets are adequately protected.
What you will do :

• Monitor and enhance a comprehensive enterprise-wide information security program based on NCUA requirements and industry frameworks
• Maintain and enhance Information Security Policies, Information Security Standards and Procedures and Change Management Procedures
• Implement and enforce information security measures as directed by the SVP of Enterprise Risk
• Oversee and perform Information Security Awareness testing and continual training
• Oversee the execution and remediation of penetration testing.
• Oversee and execute audits of information security requirements across all departments, solutions, and environments.
• Oversee the execution of Information Security directives across departments
• Continually maintain information security risk assessments, business impact analysis, and business continuity plans
• Continually validate adherence to all NCUA and FFIEC regulations
• Lead preparation for and participate in the annual NCUA and ACUA IT examination
• Coordinate with People Operations to create, maintain and present information security training materials to educate employees on organizational standards
• Provide input into business processes planning to ensure that proper information security measures are being taken
• Collaborate with management and Information Technology to improve Information Security
• Keep abreast of current information security threads and trends
• Evaluate logs, alerts and vulnerability scans for possible threats and prioritize response.
• Participate in appropriate board committee reporting as needed
• Oversee and maintain Business Continuity, Disaster Recovery and Incident Management documentation, playbooks, and exercises
• Assist in new and existing vendor evaluation
• Develop quarterly Information Security communication for employees
• Assist marketing with information security training for membership as needed
• Develop and execute tabletop exercises with appropriate management
• Perform other duties as assigned

Requirements
Qualifications :

• A minimum of three years in an Information Security discipline or at least five years in an information technology discipline
• Bachelor's degree, relative and equivalent experience can be substituted for degree
• Financial Industry experienced preferred but not required
• CISM, CISSP, Security or other security certification preferred but not required
• Courtesy, tact, and diplomacy are essential elements of the job. Work involves much personal contact with others inside and/or outside the organization for purposes of giving or obtaining information, building relationships, or soliciting cooperation
• Excellent communication skills, both written and verbal, with the ability to tailor message to different audiences
• Commitment to LCU's Mission Statement and Core Values
• Must successfully complete appropriate LCU assessments

This Job Description is not a complete statement of all duties and responsibilities comprising this position.
Listerhill Credit Union is an equal opportunity employer and does not discriminate in employment decisions based on any factor protected by federal, state or local law.