Information Security Officer

We are looking to add an Information Security Officer (ISO) to our team! The Information Security Officer (ISO) is responsible for the management of the bank’s information security program, ensuring the confidentiality, integrity, and availability of organizational information systems. This role oversees the implementation of security policies, procedures, and systems to meet regulatory requirements and align with business needs. The ISO also leads risk assessments, incident response, and vendor management activities related to information security.

A little about us…

Citizens First Bank is a family-owned community bank with roots dating back to 1969. We are proud of our role in helping people and businesses grow and thrive in Viroqua, Sparta, Trempealeau, Viola, Centerville, and Holmen.

Citizens First Bank supports local community organizations and non-profits and our employees take part in community events and volunteer to help improve the lives of others. At Citizens First Bank, our strength is in our people. We believe our employees’ experiences, backgrounds, and lives contribute to their roles and our communities.

Primary Job Duties:

Security Program Management

Implement and manage the bank’s information security program as mandated by GLBA and other regulations.
Ensure security measures are integrated with business strategies and operational requirements.
Maintain policies for access control, disaster recovery, business continuity, incident response, and risk management.

Risk Assessment

Perform regular information risk assessments to ensure systems are adequately protected.
Work with external auditors to ensure the institution meets all necessary compliance standards.

Incident Response

Lead the incident response team to contain, investigate, and mitigate security breaches.
Ensure prompt reporting of security incidents and implement measures to prevent future breaches.

Vendor Management

Collaborate with vendors and consultants to strengthen the bank’s security posture.
Oversee vendor security practices to ensure compliance with internal and regulatory requirements.

Security Awareness and Training

Lead information security awareness and training initiatives for employees.
Educate staff on information risks, security responsibilities, and compliance with the security program.

Regulatory Compliance

Stay updated on new regulations and security threats affecting the financial industry.
Ensure the security program adheres to industry standards and meets FFIEC and other regulatory guidelines.

Perform other duties related to information security management as assigned by the CEO or IT Committee.

Qualifications:

Education:

Bachelor’s degree in Information Systems, Computer Science, Information Security, or a related technical field. An advanced degree is a plus.

Certifications:

CISSP, CISM, CISA, Security+, or other recognized information security certifications preferred.

Experience:

Previous experience in information security, with financial industry experience preferred but not required.

Other Skills and Abilities:

Ability to manage security programs effectively, respond to incidents swiftly, and manage third-party relationships.

Performance Measures:

Successful implementation and maintenance of the information security program.
Effective handling and resolution of security incidents.
Compliance with regulatory requirements and timely completion of risk assessments and audits.

Citizens First Bank provides a competitive salary along with opportunities for discretionary year-end bonuses. Our comprehensive benefits package includes generous PTO, a 401(k) with a 3% Safe Harbor contribution, and an additional discretionary profit-sharing contribution. As a cornerstone of our community, we take pride in being part of something larger while fostering a close-knit, family-like atmosphere within the bank. Join our team and experience the difference—apply today to be considered!

Please email Awierzba@citizensfirstbank.net your resume if interested in applying.