Union Savings Bank

About Union Savings Bank

IT Security Responsible for the development of and compliance with a Security Program including protecting the privacy of customers and employees personal information. Document and ensure compliance with procedures that support the Security Program. Monitor the internal control systems to ensure that appropriate access levels are maintained. Responsible for conducting periodic penetration tests and vulnerability assessments to identify areas of weakness. Develop gap analysis and track corrective action. Review and approve all new and significant changes to the Bank’s critical infrastructure, including network design and architecture, server / desktop builds and communication systems. Develop key information security metrics and report results to senior management and Board of Trustees on a regular basis. Serves as the Information Security and Privacy Officer of the Bank. Establish appropriate standards and risk controls associated with proprietary and intellectual property and direct the establishment and implementation of policies and procedures related to security. Implement Internet, Intranet and website security programs, including firewall, intrusion detection and prevention systems. Track remediation of information security gaps through an effective risk assessment program. Responsible for the Bank’s Incident Response Plan and developing emergency procedures and response plans. Stay current with security techniques and security bulletins to provide advice to system users and network administrators. Provide guidance to Learning and Development and to Marketing in the development of employee and customer security awareness programs. Manage internal and external audits, security assessments and regulatory exams. Responsible for the collection of data and other needs of auditor or examiner. Business Continuity Maintain the Business Continuity Plan (BCP) working with all departments to update their respective BIAs. Develop and execute a testing schedule of the plan, document results and report to senior management and the Board of Trustees. Work with IT to implement any changes needed based on deficiencies noted during testing. Track the remediation process. BSA/AML Program Management Oversight and assist in: Developing and maintaining the BSA/Anti-Money Laundering Program. Designing, monitoring, and updating workflows and procedures to optimize the effectiveness of the AML Program. Providing guidance to Learning & Development in connection with the development and delivery of AML compliance training programs. Risk Assessments Develop and maintain an effective IT Risk Assessment Program. Oversee the annual completion of IT Risk Assessments, security gap analysis and implementation of controls to address any areas of risk identified during the process. Report findings to Management committees. Develop and maintain an effective Vendor Oversight program. Review vendor internal control and security reports to ensure that systems are functioning properly and securely. Work with Project Management to ensure new vendors are properly risk assessed prior to contracting for services. Ensure existing vendors are reviewed on a schedule commensurate with their inherent risk. Physical Security Oversee the Physical Security Program: Maintenance of written Security Program in Compliance with the Bank Protection Act. Physical protection responsibilities to include asset protection, workplace violence prevention, and management of access control systems and video surveillance systems. Ensure a safe and secure workplace at all bank locations. Coordinate fraud investigations and provide guidance to business units to mitigate losses. Work with Human Resources to conduct internal investigations related to fraud or misconduct. Manage relationships with local, state and federal law enforcement. Human Resources and Team Development Team Development: motivate personnel and promote workplace enthusiasm; provide opportunities for professional growth through education/training; provide the tools/skills (cross train) necessary for employee growth at USB. Manage HR processes for direct reports (performance/incentive/introductory period reviews, recruitment, career development, training, interviews, disciplinary/corrective actions, etc.) Certified Information Systems Security Professional (CISSP) designation required.

Synonyms

Technologies (from Job Ads)

Hiring Locations

Headquarters

Loading map...

Company Info

Company Type: Private

Company Size: 51 - 250

Revenue: 25 - 100 million (USD)

Job Ad Metrics

Job Ads found: 56

Job Ads per Month: 1.9

Hiring Locations: 3

Data Info