- Company Name
- Cooperative Credit Union Association
- Job Title
- VP of Information Security, Central One Federal Credit Union, Shrewsbury, MA
- Job Description
-
**Job Title:** VP of Information Security
**Role Summary:**
Senior security executive responsible for developing and executing the enterprise security strategy, ensuring regulatory compliance, managing security vendors, and leading hands‑on security operations. Provides independent oversight of IT, reports directly to the CEO and Board, and bridges governance with operational execution to protect data, systems, and reputation.
**Expectations:**
- Treat cybersecurity as a business priority with direct visibility to senior leadership.
- Maintain independent oversight of IT operations, balancing governance and execution.
- Deliver measurable security outcomes through KPIs and continuous improvement.
**Key Responsibilities:**
- Develop and maintain security strategy, roadmap, and policies.
- Lead risk assessments, compliance programs (NIST, ISO 27001, SOX ITGC, PCI DSS, GLBA, etc.).
- Serve as primary liaison to CEO, Board, regulators, and auditors on cybersecurity risk.
- Manage vendor and third‑party risk: contract reviews, selection, and performance oversight.
- Deploy, configure, and manage security platforms (EDR, SIEM, DLP, IAM, PAM, vulnerability management, firewalls).
- Lead incident detection, response, and forensics; coordinate across IT and business units.
- Administer identity and access governance, including RBAC and privileged access management.
- Oversee security monitoring, log analysis, threat detection, and alert tuning.
- Direct organization-wide security awareness and training programs.
- Collaborate with CIO/IT on incident response, DR/BCP, IAM, and vendor integrations.
**Required Skills:**
- Strategic leadership and hands‑on technical security expertise.
- Deep knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls).
- Regulatory compliance expertise (SOX, PCI DSS, GLBA, NCUA).
- Vendor management: evaluation, negotiation, and oversight of security partners.
- Proficiency with security tools (Microsoft Security Suite, Splunk/LogRhythm, Okta/Entra ID, Artic Wolf, etc.).
- Strong analytical, problem‑solving, and decision‑making abilities.
- Excellent communication and executive‑level presentation skills.
- Team leadership: mentoring, coaching, and building a security function.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- 8–10 years of progressive IT security experience, including strategic leadership and hands‑on operations.
- Preferred certifications: CISSP, CISM, CISA, CCSP, or GIAC.
Shrewsbury, United states
On site
Senior
07-11-2025