ZipRecruiter

Log In

1

Bank Information Security Officer Jobs (NOW HIRING)

Fortis Bank

Information Security Officer

Midvale, UT · On-site

$190K - $200K/yr

Develop, implement, and maintain the bank's information security policies, procedures, and ... Reports to the SVP, Chief Information Officer Office Requirements : This position is required to be ...

Fortis Bank

Information Security Officer

Denver, CO · On-site

$190K - $200K/yr

Develop, implement, and maintain the bank's information security policies, procedures, and ... Reports to the SVP, Chief Information Officer Office Requirements : This position is required to be ...

Fortis Bank

Information Security Officer

Denver, CO · On-site

$190K - $200K/yr

Develop, implement, and maintain the bank's information security policies, procedures, and ... Reports to the SVP, Chief Information Officer Office Requirements : This position is required to be ...

next page

Showing results 1-20

All JobsBank Information Security Officer Jobs

Bank Information Security Officer information

See salary details

$29.5K

$94.9K

$170.5K

How much do bank information security officer jobs pay per year?

As of Aug 13, 2026, the average yearly pay for bank information security officer in the United States is $94,926.00, according to ZipRecruiter salary data. Most workers in this role earn between $49,500.00 and $127,500.00 per year, depending on experience, location, and employer.

How does a bank information security officer typically collaborate with other departments to ensure data protection?

A Bank Information Security Officer works closely with departments such as IT, compliance, risk management, and operations to develop and implement robust security policies. They regularly communicate with these teams to assess potential vulnerabilities, coordinate on incident response plans, and ensure ongoing compliance with regulatory requirements. Collaboration often involves leading security awareness training, conducting joint risk assessments, and providing guidance during audits or security incidents. This cross-functional teamwork is essential for maintaining a secure banking environment and protecting sensitive customer information.

What are the key skills and qualifications needed to thrive as a bank information security officer, and why are they important?

To thrive as a Bank Information Security Officer, you need expertise in information security principles, risk management, regulatory compliance, and typically a degree in information technology or cybersecurity. Familiarity with security frameworks (such as ISO 27001 or NIST), security tools (like SIEM, firewalls, and intrusion detection systems), and relevant certifications (e.g., CISSP, CISM) is highly valued. Strong analytical thinking, problem-solving abilities, and effective communication skills help in managing threats and collaborating with different departments. These skills and qualifications are essential to protect sensitive financial data, ensure regulatory compliance, and maintain trust in the bank’s security posture.

What is the difference between Bank Information Security Officer vs Bank IT Security Analyst?

AspectBank Information Security OfficerBank IT Security Analyst
CertificationsCISSP, CISM, GIACCISSP, CompTIA Security+
Work EnvironmentSecurity teams within banks, focusing on policies and complianceIT departments, focusing on system security and monitoring
Employer & Industry UsageFinancial institutions, banks, credit unionsBank IT departments, financial services firms

The Bank Information Security Officer primarily oversees security policies, compliance, and risk management within banks, ensuring data protection and regulatory adherence. In contrast, the Bank IT Security Analyst focuses on technical security measures, monitoring systems, and incident response. Both roles are essential for safeguarding banking operations but differ in scope and daily responsibilities.

What is a bank information security officer?

Bank Information Security Officers are professionals responsible for overseeing and managing the security of a bank's information systems. They develop, implement, and maintain security policies and procedures to protect sensitive financial data from cyber threats, unauthorized access, and data breaches. Their role involves assessing risks, ensuring compliance with regulations, conducting security training for staff, and responding to security incidents. They also work closely with IT teams and senior management to align security strategies with the bank's business goals.
More about Bank Information Security Officer jobs
What job categories do people searching Bank Information Security Officer jobs look for? The top searched job categories for Bank Information Security Officer jobs are:
Bank Information Security Officer jobs near you
Infographic showing various Bank Information Security Officer job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 22% Part Time, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $94,926 per year, or $45.6 per hour.

Information Security Officer

CityFirst Bank

Washington, DC • On-site

$135K - $140K/yr

Full-time

Re-posted 23 days ago

Job description

WHO WE ARE
City First Bank N.A. is a mission-driven Community Development Financial Institution (CDFI) principally focused on a transformative impact in underserved, urban markets with the highest needs to drive equitable economic development. Our credit activities are purely commercial and focused on the following segments: Multifamily Affordable Housing, Not-for-Profit Finance, and Small Business Finance. As a depository and commercial lending provider with over $1.3 billion in bank assets as of December 31, 2024, our unified organization has over 100 employees in Washington DC and Los Angeles/Inglewood, CA.
ROLE SUMMARY
The Information Security Officer is responsible for monitoring, analyzing, and maintaining the bank's technical security controls in support of City First Bank's Information Security Program. This role will be focused on maintaining the security of the bank's applications and network which includes creation and timely execution of security projects, tool installations and integrating risk-based threat intelligence into the operational environment. The role also supports the ability to maintain assurance in our technical security controls, especially on the Cloud, so that risks to the confidentiality, integrity, and availability of the bank's information systems and infrastructure are sufficiently mitigated which in turn, supports the bank's operational and compliance goals. The role will also perform triage and analysis of security events escalated from the Tier1 and Tier-2 support teams.
ESSENTIAL FUNCTIONS AND RESPONSIBILITIES
  • Advanced monitoring of the day-to-day operation of Security Information and Event Management (SIEM) and Network Anomaly Detection and other security control tools.
  • Act as the first point of response for security event alerts and notifications. Maintain an efficient and secure IT computing infrastructure on the bank's environment, cloud, and SaaS products.
  • Provide regular security reporting and risk metrics to IT Leadership, Senior Leadership, and committees as appropriate.
  • Monitor knowledge sharing services and advise leadership on cybersecurity trends, emerging threats, and regulatory guidance.
  • Leads Information Security compliance tasks and coordinate and gather artifacts for internal and external audits.
  • Serve as the bank's designee for regulatory and audit purposes. Align controls with guidance and recommendations.
  • Work with Compliance to identify, assess, and track remediation of security risk and findings.
  • Ensure compliance with GLBA, FFIEC, and other regulatory, industry, and cybersecurity standards for access control and system permissions.
  • Manage identity and access, roles and permissions, assignments and changes, and all other activities to ensure adherence to policies and procedures.
  • Oversee periodic User Access Reviews for key bank systems.
  • Enable and oversee the process of employee user account provisioning and de-provisioning, including Active Directory and SaaS applications.
  • Lead the creation, implementation and integration of identity tools and practices that enhance the organization's security and regulatory compliance.
  • Conduct and maintain IT risk assessments including Information Security, GLBA, and Vendor / Third Party reviews.
  • Manage vendor due diligence reviews from an information security and technology perspective.
  • Develop and evaluate security procedures for IT Department.
  • Develop and administer the bank's security awareness program including annual training and phishing simulations.
  • Partner with IT infrastructure, application, and operations teams to ensure secure system design and configuration.
  • Generate and analyze reports, monitor alerts, and review reports to monitor security activities and document findings and recommend corrective actions.
  • Work with managed service providers, network administrators and security operations to resolve problems, evaluate new solutions, recommend changes, and investigate incidents.
  • Collaborate with lines of business, system, and network administrators to develop and manage role-based access control groups for ensuring appropriate access to information systems, applications, and data.
  • Responsible for analyzing user access roles, permissions, and profiles to establish user provisioning within all bank applications.
  • Implement and upgrade network security tools running in the physical and virtual environments.
  • Ensure confidential data is secure and implement controls to ensure visibility and auditability across organization for changes in roles, functions, access-levels, and data footprint.
  • Other duties as assigned.

Requirements
EDUCATION & EXPERIENCE
Required Education/Experience:
  • Bachelor's degree in Computer Science or Information Systems, Information Technology, or related focused technical training (CISSP, CISM, CRISC, or CISA) or in lieu 4 additional years of engineering and information security experience.
  • 7+ years' experience in a combination of information security, or IT operations/engineering, or IT risk management
  • 4+ years' experience with designing and implementing information security technologies.
  • Extensive experience in banking regulations and compliance requirements, specifically related to regulatory examinations and security requirements.
  • Experience in supporting and managing audit, examination, and regulatory interactions.

Preferred Education/Experience:
  • 8 years of Engineering or Security Administration in banking preferred.
  • 2 years security engineering/administration in the banking/financial sector

KNOWLEDGE, SKILLS, AND ABILITIES
Required Knowledge & Skills:
  • Knowledge of Microsoft Azure and Microsoft O365 virtualized environment and tools is a must. Ability to configure and work on Azure Security Center and O365 Security Center.
  • Knowledge of Active Directory, Azure AD, identity management, DLP policies, Azure Sentinel and other security tools essential.
  • Familiarity with at least one security best practice standards such as the Center for Internet Security (CIS) Security Controls or NIST Cybersecurity Framework, or equivalent.
  • Excellent knowledge of Azure Security Center and Azure portal. Knowledge of SEIM and AD tools.
  • Excellent knowledge of Microsoft Operating system and Azure tools. Strong Active Directory and Windows Group Policy knowledge.
  • Networking technology and protocols, including routers, switches, VPNs, Citrix, email gateways, etc.
  • Requires skill in providing expert input into technology projects.
  • Assist the Tier-1 and Tier-2 escalations with troubleshooting and analysis of security events.

Salary Description
$135,000 - $140,000, annually

Apply