Avp Information Security & Grc

PRIMARY OBJECTIVE

The AVP – Information Security & G serves a dual role supporting both Bankers' Bank of the West and its affiliate, CivITas Bank Solutions. This position is responsible for leading the information security consulting practice for CivITas Bank Solutions, providing governance, risk, and compliance (GRC) services to community bank clients. The role includes client relationship management, business development, service delivery, and mentoring junior staff.

Additionally, this position supports the bank's internal information security program. The AVP – IS & GRC will communicate regularly with clients, vendors, and internal stakeholders, and produce reports for senior management and boards of directors for both the bank and client institutions.

The AVP – Information Security & GRC serves a dual role supporting both Bankers' Bank of the West and its affiliate, CivITas Bank Solutions. This position is responsible for leading the information security consulting practice for CivITas Bank Solutions, providing governance, risk, and compliance (GRC) services to community bank clients. The role includes client relationship management, business development, service delivery, and mentoring junior staff.

Additionally, this position supports the bank's internal information security program. The AVP – IS & GRC will communicate regularly with clients, vendors, and internal stakeholders, and produce reports for senior management and boards of directors for both the bank and client institutions.

CivITas Bank Solutions (approximately 90%):

• Lead and grow the information security consulting practice for community bank clients.
• Develop and maintain client relationships, serving as a trusted advisor on information security and compliance matters.
• Provide GRC consulting services including policy and procedure development, risk assessments, and regulatory compliance guidance.
• Support clients through IT audits, regulatory examinations, and remediation efforts.
• Participate in client IT/IS Steering Committees and present to boards of directors.
• Oversee vulnerability assessments, penetration testing, and social engineering testing programs for clients.
• Drive business development efforts including conference presentations, client proposals, and relationship building.
• Mentor and develop junior staff members in GRC and information security disciplines.
• Develop and deliver educational content including webinars, training videos, and conference presentations.
• Manage client engagements, timelines, and deliverables.

Bankers' Bank of the West (approximately 10%):

• Support the bank's internal information security and compliance program.
• Assist with internal audits, examinations, and security assessments as needed.
• Provide backup support for CISO.

REQUIRED EXPERIENCE / EDUCATION

• 8-12 years of related experience in information security, GRC, or IT risk management. (Education may substitute for some experience.)
• Bachelor's degree preferred; equivalent experience accepted.

Required Knowledge / Skills

• Strong knowledge of GRC frameworks such as FFIEC, NIST CSF, CRI, and CIS Controls.
• Experience with financial institution regulatory requirements and examination processes.
• Demonstrated ability to develop and present to executive leadership and boards of directors.
• Experience with vulnerability assessments and penetration testing methodologies.
• Strong client relationship management and business development skills.
• Policy and procedure development experience.
• Ability to work independently and manage multiple client engagements.
• High degree of attention to detail, accuracy, initiative, and dependability.
• Maintain positive relationships and provide effective communication with customers, employees, and management.
• Strong organizational, time‑management, and problem‑solving skills.
• Proficiency in Microsoft Office applications and willingness to adapt to new technology.
• Understanding of banking regulations, laws, and procedures.
• Authorization to work in the U.S. without employer sponsorship.

• Primary workspace designation is hybrid.
• Professional environment in a secure high‑rise office suite in downtown Denver, CO.
• Working hours may vary between 6:00 a.m. and 9:00 p.m., Monday through Friday. Infrequent evening and weekend work may occur.
• 20% travel expected.
• Extended periods of desk‑based computer and telephone usage.
• May require occasional overnight travel to visit customers or attend conferences.
• Ability to lift up to 40 lbs.