Information Security Financial Examiner

Information Security Financial Examiner 2-4

The Division of Consumer Services is currently recruiting for an Information Security Financial Examiner (ISFE). You will perform information technology (IT) examinations and in-depth analysis of a financial institution’s IT risk management practices, including but not limited to analyses and evaluation of technical controls, audit practices, customer information security and cybersecurity programs, in‑house development, vendor acquisition and oversight, business continuity management, and incident response planning.

The selected candidate will be placed at the appropriate ISFE 2‑4 level based on their qualifications and experience.

In the Division of Consumer Services, you will enjoy work‑life balance while enforcing consumer protection laws. Consumer protection is at the heart of what we do, whether we are regulating emerging Fin Tech industries like those dealing in cryptocurrency or more established forms of money transmission, escrow, mortgage and consumer lending, and mortgage or student loan servicing. We license and conduct examinations of the companies in those industries and take action against those who violate the law.

We pride ourselves on helping people – by ordering refunds or restitution for consumers, by enhancing the efficiency and effectiveness of state government, and by working to maintain robust, healthy financial industries.

The Division of Consumer Services accomplishes the DFI’s mission through licensing, conducting examinations of licensees, investigating consumer complaints, and enforcing state statutes and rules, and federal regulations and laws, related to financial service providers. The Division regulates business activities of consumer loan companies, mortgage brokers, money transmitters and currency exchangers, as well as check cashers and sellers, also known as “payday lenders.”

The Division regularly conducts examinations of its licensed entities for compliance with state and federal laws.

• Serve as examiner‑in‑charge, independently leading a team of examiners examining the most complex financial institutions regulated by the Division.
• Analyze financial services companies with significant problems examining the overall safety and soundness of their information security program.
• Analyze information systems and technology (IS&T) which includes in‑depth technology risk analysis, off‑site computer analysis, evaluation of technical controls, audit practices, customer information security programs, vendor acquisition and oversight. Often these situations involve dealing with highly sensitive and confidential matters.
• Evaluate the financial institution's policies, practices, and procedures and make recommendations for enhancements when appropriate.
• Interpret and determine compliance with applicable State and Federal laws, rules, and regulations, including Title 16, Code of Federal Regulations, Section 314 Standards for Safeguarding Customer Information.
• Lead joint and coordinated examinations with other states and federal agencies. Examinations with federal regulators often require a leadership role in the field examinations as well as the preparation of the written report of examination.
• Manage all phases of IT field examinations; provide direct mentoring; plan the scope of examinations; coordinate activities of assigned personnel. Lead IT examination exit conferences with the Examiner in Charge (EIC), the institution’s IT manager and other IT employees.
• Enhance the DFI IT examination team by mentoring less experienced examiners on core information security and technology components.
• Write technical reports of findings and violations of laws and regulations for supervisors’ review, including concerns, criticisms and recommendations regarding business practices and compliance with laws and regulations.

An associate’s degree that focuses specifically on information technology, cyber security, or a related field of study.

OR equivalent work/educational experience in the regulation, examination or audit, and/or analysis of information security/technology and cybersecurity may…