Description Description: We are seeking an Information Security and Compliance Manager to oversee and recommend acceptable risk levels for the credit union, ensuring the integrity, confidentiality, and availability of information. This includes on-premise solutions, modules, and systems. Responsibilities: Serve as the process owner for information assurance, ensuring compliance with regulatory requirements and security policies. Collaborate with leadership to ensure consistent application of cyber and information security policies. Report to the Executive Team and Board of Directors on the Information Security Program and audits. Monitor data, access controls, and user profiles, and design reports to identify security issues or intrusions. Ensure disaster recovery and business continuity processes are tested and updated regularly. Work with IT to conduct risk reviews and implement mitigation strategies. Recommend tools to enhance security posture and provide security training during onboarding. Conduct quarterly vulnerability assessments and review vendor security documentation. Collaborate with IT, Security, and Compliance to ensure robust security protocols. Actively engage in strategic corporate discussions. Threat Management: Monitor security devices and services to mitigate identified threats. Maintain situational awareness of systems and vendor ecosystems. Collect, analyze, and correlate security-related data to ensure daily monitoring activities are documented. Risk Assessments: Conduct IT risk assessments for key systems and processes. Manage and update the Information Security Risk Assessment Framework based on IT General Controls (ITGC) and security standards. Present findings and recommendations to leadership. Policy and Procedure: Develop and maintain information security policies, procedures, and guidelines, including disaster recovery and compliance reporting. Compliance and Enforcement: Ensure compliance with security policies, privacy regulations, and information security laws. Investigate security misuse and unresolved exposures. Review and update security policies and procedures annually. Project and Risk Governance: Chair the Information Security Committee and contribute to Vendor and Risk Management Committees. Assess third-party data security risks and assist with regulatory compliance. External Audits: Participate in audit preparations and respond to regulatory examination questions. Maintain documentation of issues and remediation plans. Requirements Access Control, Cisco Technologies, Firewall Technologies, IDS, IPS, Active Directory, Auditing, Authentication, Computer Hardware, Configuration Management, Financial Services, CISSP Technology Doesn't Change the World, People Do.® Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app (https://www.roberthalf.com/us/en/mobile-app) and get 1-tap apply, notifications of AI-matched jobs, and much more. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information. © 2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking “Apply Now,” you’re agreeing to Robert Half’s Terms of Use (https://www.roberthalf.com/us/en/terms) .