VP InfoSec Officer

Bridgewater Bank is seeking a Vice President, Information Security Officer to lead governance and oversight of the Bank’s information security, business continuity, incident response, and third-party risk programs.

Responsibilities

• Partner with the Chief Risk Officer and Chief Technology Officer to continuously strengthen governance and oversight for information security, business continuity, and third-party risk
• Drive continuous improvement by creating information security risk assessments, evaluating the effectiveness of IT security controls, and proposing scalable enhancements for identified gaps
• Collaborate with business leaders to ensure data governance and cybersecurity controls are created and maintained, including oversight of:
  • Infrastructure and application security
  • Vulnerability management
  • Access management
  • Cybersecurity and fraud resiliency
• Oversee execution and management of the incident response plan, covering preparation, detection, response, recovery, and communication to relevant stakeholders
• Provide oversight of data governance, record retention, and privacy laws related to information and cybersecurity
• Lead third-party risk reviews tied to information security and business continuity planning, including SOC reviews and vendor assessments
• Develop monitoring tools and key risk indicators to measure information security program effectiveness and business continuity readiness, with reporting to Senior Management and the Board
• Administer the Bank’s information security awareness and training program
• Act as primary liaison for regulatory examinations and independent audits, ensuring documentation is maintained for related requests

Requirements

• Bachelor’s degree in information security, technology, finance, or another business-related field
• 7+ years experience with meaningful ownership or oversight of an information security program, including risk assessments, control design, and assurance monitoring
• Working knowledge of technology platforms plus capabilities in:
  • Identity and access management
  • Data protection
  • Vulnerability management
  • Security operations
  • Incident response
  • Cyber resilience
• Ability to evaluate risk materiality, form evidence-based conclusions, and translate technical security issues into clear business and risk recommendations
• Proven ability to present cybersecurity and technology risk topics to Boards, executive management, committees, and both technical and non-technical audiences
• Demonstrated relationship-building across business lines and lines of defense, including influencing without reliance on hierarchy and driving sustainable remediation
• Experience working with regulators or external auditors on information security or cybersecurity matters
• Excellent verbal, written, and interpersonal communication skills with strong attention to detail, critical thinking, accuracy, prioritization, and follow-through
• CISSP, CISA, CISM, CRISC, or equivalent certification

Technologies

• CISSP
• CISA
• CISM
• CRISC

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Parental leave
• 401(k) with employer match
• Paid vacation & paid holidays

Location: Saint Louis Park, MN (hybrid)

Compensation: USD 150,000 - 200,000 per year

Status: Exempt