Information Security Officer (onsite)

Location: Newtown, CT

Exciting information security career opportunity at Newtown Savings Bank! The Information Security Officer (ISO) reports directly to the Bank’s Chief Risk Officer and is primarily responsible for managing information security risk. The ISO will be a hands-on professional who can easily collaborate with other departments to promote and support the Bank’s information security program. The ISO will work with all levels of Bank employees including senior management, and individual department teams to assess, manage and determine acceptable levels of risk for the Bank. These risks include cybersecurity, business continuity, vendor, and IT security risks. This position will also present to the Board of Directors.

PRIMARY RESPONSIBILITIES

• Responsible for the development, implementation and monitoring of the Bank’s information security management program to ensure adherence with all federal and state regulations and guidelines.
• Responsible for the development, implementation and monitoring of the Bank’s Business Continuity Program to ensure adherence with all federal and state regulations and guidelines.
• Identifies and mitigates risk associated with information technology use and the protection of sensitive bank and customer information. Such tools and sources of information include but are not limited to performing risk assessments (IT and Cyber, GLBA), monitoring network and application activity, vulnerability identification, patch management, change management, privileged and user access administration and Incident Response Planning.
• Manage systems/processes that support the collection, storage, assessment, and ongoing monitoring of third parties who may have access to sensitive information through application risk assessments, SOC Reports, network penetration test results, and identity and access management.
• Collaborates with IT leadership and independently challenges information technology practices and processes.
• Stays current on information security trends and news, serves as an advocate for Bank-wide practices for IT security and provides training to employees and customers as needed.
• Provides monthly cybersecurity updates to the Board of Directors and quarterly updates to the Enterprise Risk Committee.
• In the event of a potential security breach, the ISO has a central role in executing the Bank’s Incident Response Plan. The ISO will work closely with the management team, IT and impacted departments to timely respond, investigate, and resolve identified incidents.
• Work with department managers in the preparation of Business Impact Analyses (BIA) to support disaster recovery application. Maintains and improves the Bank’s Business Continuity Plan (BCP) with the preparation and reporting of key information to management, federal and state examiners, and the Enterprise Risk Committee.
• Conducts Cyber/Business Continuity Planning Tabletop Testing and Pandemic Testing.
• As necessary, performs independent secondary reviews of critical IT reporting.

POSITION REQUIREMENTS

• Bachelor’s degree and 4 years of relevant experience.
• Familiarity with banking and financial services, particularly elements of information security pertinent to community banking is preferred.
• Aptitude to acquire data efficiently, perform risk assessments and report on results and recommendations at various levels of the Bank.
• Working knowledge of FFIEC IT and Cybersecurity requirements and practices is preferred.
• Ability to understand hardware and software systems is required.
• Ability to maintain confidentiality regarding information processed, stored, or accessed by the systems is required.
• Ability to manage multiple concurrent projects and to reason analytically is required. The ability to work with and train people possessing differing levels of technical knowledge is required.
• Ability to synthesize and analyze information to assist the Chief Risk Officer in overseeing the Bank’s risk profile.
• Detail-oriented and have the capacity to review regulatory pronouncements and to ascertain the most pertinent issues for the Bank.
• Strong verbal and written communication skills required as the position interacts with management at all levels across the organization.
• Must have high level of expertise in the use of all Microsoft Office applications, i.e., Excel, Word, PowerPoint and Outlook.

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Any physical demands or work conditions described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Full time employees also receive a complete benefit package including a generous 401(k), medical benefits, paid time off, and short- and long-term disability programs.

Newtown Savings Bank is an equal opportunity and affirmative action employer regardless of race, gender, disability status, protected veteran status. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, age, marital status, national origin/ancestry, sexual orientation, gender identity, disability status, protected veteran status, or any other legally protected status.