Job Details
Job Location
MAS Building - Pharr, TX
Summary
The Information Security Supervisor assists the Chief Information Security Officer in establishing and maintaining a corporate wide information security program to ensure that information assets are adequately protected. This position is responsible for identifying, evaluating, and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the cyber risk posture of the Bank.
In addition, the Information Security Supervisor will take a primary role in overseeing, assigning, leading production, and filing deadlines and targets for the Information Security Department. This position is responsible for quality control reviews for direct reports, while collaborating with risk management, and IT management, to ensure the Bank meets the information security goals.
Duties and Qualifications
The duties listed below may not include all responsibilities that the person in this role may be asked to perform. Incumbent may be required to perform other related duties as assigned.

• Assist the Chief Information Security Officer in the overall Information Security Program management
• Supervises the monitoring efforts of the Information Security Department
• Leads all information security risk assessments for the Bank
• Perform appropriate quality control assessments over Information Security Program components
• Perform research as appropriate to provide sound, well-reasoned information security advice and support
• Monitor compliance with GLBA and privacy regulations regarding data confidentiality, transmission, and storage

• Prepare, analyze, and monitor production statistics to meet both production and quality expectations
• Work with auditors and examiners during regulatory compliance audits/examinations
• Participates in job specific training and other various Bank training programs, as necessary
• Comply with all federal and state laws and regulations, and all established bank policies and procedures
• Maintain current knowledge of all information security and cybersecurity best practices, rules, regulations, and laws
• Proactive identification and mitigation of IS/IT risks as well as assisting in the development of periodic reports and dashboards presenting the level of controls compliance and current IS/IT risk posture.
• Maintains current knowledge of all rules, regulations, and laws as they apply to BSA/OFAC/USA Patriot Act/CIP/AML, and ensures adherence by the respective department personnel

QUALIFICATIONS
These specifications are general guidelines based on the minimum experience normally considered essential to the satisfactory performance of this position. The requirements listed below are representative of the knowledge, skill and/or ability required to perform the position in a satisfactory manner. Individual abilities may result in some deviation from these guidelines.

• A Bachelor's degree in Information Security, Information Technology, or a related field or is working towards completion of such a degree (relevant work experience may be substituted for degree requirement)
• Must possess a minimum of 7 in an Information Security or Information Technology role with working knowledge or regulatory environment and applicable banking regulations

• Computer proficiency in Windows, Microsoft Excel, and Word
• Good organizational, interpersonal and communication skills
• Attention to detail and mental concentration are necessary for accurately performing multiple tasks in a fast-paced environment with frequent interruptions, as well as the ability to meet deadlines and multitask
• Prior project management experience
• Extensive PC knowledge in order to train and direct employees using applications and operating systems
• Ability to work effectively in a fast-paced environment and meet deadlines
• Knowledge of IS/IT processes and controls and strong understanding of risk and control frameworks such as (FFIEC, CoBIT, ISO, NIST, ITIL, PCI).
• Must be able to work flexible hours (Monday - Friday, and occasional Saturdays)

ORGANIZATION

• This position reports to the Chief Information Security Officer
• This position supervises the Information Security Analysts

TRAINING REQUIREMENTS
All employees are required to attend scheduled mandatory trainings and complete online regulatory compliance training courses applicable to their specific job function. In all situations, employees must ensure that their actions fully comply with all federal banking laws and regulations, including internal bank policies and procedures. Failure to adhere to these requirements will be grounds for disciplinary action, including probation and possible termination.
COMMUNITY INVOLVEMENT
Lone Star National Bank's Mission Statement includes a commitment to helping our communities grow by serving them with pride and integrity. All employees are encouraged to volunteer for bank sponsored activities, civic, charitable and community events and to be active in the communities we serve.
ATTENDANCE
Punctuality and regular attendance should be regarded as essential functions of any position at Lone Star National Bank.
Among other things, "good attendance habits" mean the following:

• Be at your workstation ready for work by the start of each workday
• Remain at your workstation, unless the needs of the job require being elsewhere, except during authorized breaks (including restroom breaks)
• Take only the time normally allowed for breaks
• Call in and notify your supervisor or another member of management if you are going to be either absent or tardy
• Alternate work arrangements such as telecommuting or working from home are not permitted by Lone Star National Bank

LSNB is an Equal Opportunity/Affirmative Action Employer and does not discriminate in the recruitment, hiring, and conditions of employment on the basis of race, color, religion, national origin, sex (including pregnancy), sexual orientation, gender identity, marital status, disability, age, veteran status, or any other status as protected by applicable laws.
Management reserves the right to change this position description at any time according to business needs.