Information Security Officer

Job Summary:

Position is responsible for both the internal and external security of the company’s information and related systems. Develops technological and operational standards in order to maintain top level security and protect the company’s and customer information from theft or disruption. Exemplifies the Commerce WOW! Our Customer Service philosophy.

Responsibilities: Manages and plans the operational and administrative activities associated with the overall information security needs of the Bank ensuring compliance with all related government regulations.Recommends develops and implements information security risks and vulnerabilities on new and existing infrastructure, define remediation and certify that information systems meet determined security requirements.Identifies and assesses information security risks and vulnerabilities on new and existing infrastructure, define remediation and certify that information systems meet predetermined security requirements.Analyzes contingency plans with regards to information security procedures.Manages the Information Security Incident Reporting program to ensure the prevention, detection, escalation, containment and correction of security breaches.Reviews network security monitoring and overall network security procedures.Oversees network penetration and vulnerability testing.Keeps abreast of new challenges to information systems as well as developments in system protection and related information security standards.Coordinates the communication of information security awareness to all members of the organization.Responsible for the content (and in some cases the delivery) of information security seminars and training classes.Liaises and customers with regard to information security incidents.Studies the proliferation of viruses, spyware, phishing, hackers and other threats to the information systems.Maintain GLBA and SOX policies and procedures as it pertains to information security.Coordinates the Company's Vendor Management Program.Advises senior management about the status of security systems on a regular basis.Performs other related duties as assigned.

Requirements:Exemplifies the WOW philosophy and executes SMART principles.Bachelor’s degree in computer science, or equivalent experience.A minimum of five years experience working with financial computer systems in general, with at least two or more years specializing in information security.A thorough knowledge of the latest developments in security threats and protection systems.Excellent communications skills to provide training for personnel and to interface with senior management about the status and modifications to security systems as required.In-depth knowledge and experience of SOX 404 and GLBA compliance.Ability to work with all levels of internal and external customers.