The Bank of Richmondville - Career Opportunity - Join Our Team
Chief Information Officer - IT Manager
Reports to: Board of Directors/CEOWorks with: Information Technology Department, Compliance Officer, Emergency Management Team, Incident Response Team and Security Officer
General Description:The Chief Information Security Officer oversees the implementation of the banks information security program. Accordingly, this individual is responsible for coordinating information security efforts across business departments, ensuring that policies and procedures are appropriate and consistent with daily practices. The CISO also provides regular reports on the status of the Information Security Program to the Board of Directors. Coordinates security matters with Compliance Officer and Physical Security Officer, and ensures that sufficient training is providedto all Bank users.
Specific Duties and Responsibilities:Policy Creates and maintains all I.T./I.S. Policies and Procedures Serves as an internal information security advisor to the bank Coordinates the development of the security policies and procedures that support compliance Advises the bank with current information about information security technologies and related regulatory issues Training and Awareness Oversees the Information Security Training to Bank Users Provides Cybersecurity Awareness Training to Board Members Administer proper information security clearance in accordance with established Bank Information Security Policies and ProceduresCompliance and Enforcement Performs Annual Information Security Risk Assessment (based on FFIEC, GLBA 501(b), COBIT, NIST) Responsible for the NY-DFS Cybersecurity Regulations (23 NYCRR 500) Program Responsible for the FFIEC Cybersecurity Assessment Tool (CAT) PCI Policy and Self-Assessment Oversees FedLine Advantage Security Controls Microsoft Audit Enforces compliance with the security program in a balanced and consistent manner across the bank in conjunction with the Security Officer Responsible for Customer Security Center (Bank website) Monitors compliance with information security policies and procedures, referring problems tothe appropriate department manager Monitors the internal control systems to ensure that appropriate access levels are maintained Coordinates information security with physical security SBC Coordinator (Supervisory Business Center Coordinator) Review Reports of Examination (ROEs) of Banks vendors conducts/posted by the FDIC (FdicConnect Portal) Report relevant results to Management and Board of Directors Incident Response Develops and implements an Incident Reporting System to address bank security incidents (breaches), responds to alleged policy violation, or complaints from external and internal parties Reviews all system-related security plans throughout the bank's network, acting as a liaison to Information Systems Prepares and coordinates the incident response plan and procedures Disaster Recovery Responsible for Bank-wide Disaster Recovery and Business Continuity Periodical Testing of Critical I.T. infrastructures (Electrical Power, Windows, Firewalls, Core and FedLine) Assures Critical Vendors perform DR-BCP Oversees the testing of the Pandemic Flu Plan Testing
Vendor Management Performs Vendor Due Diligence Reviews SOC, SSAE or equivalent Reports Evaluates Cybersecurity Insurance
I.T. Strategic Plan Negotiates and Executes I.T. Service Contracts Maintains Licenses Inventory Oversees Hardware Inventory
. I.T. Audit/Regulatory I.T. Exams Responsible for Annual Cybersecurity and I.T. Audit Responsible for FDIC I.T. Exam (InTREX) Responsible for NY-DFS I.T. Exam
Monitoring Firewall Reports User Access (Core & Windows) Network Scan Reports Software Updates AV Scan Report
I.T. Production (back up for Network Admin/Tech Support) General troubleshooting (Active Directory, Firewalls, Core, Workstations, etc.)
