Find & Apply For Cyber / Information Security Engineer / Analyst Jobs in Winsted, Minnesota

We are looking for an experienced Information Security Officer to lead a bank's technology risk, information security, and vendor oversight efforts in Winsted, Connecticut. This role will guide the development of enterprise security practices, strengthen risk governance, and provide clear reporting to senior leadership and the Board. The ideal candidate brings strong judgment in cybersecurity, regulatory alignment, and incident response while fostering a security-aware culture across the organization.

Responsibilities:

• Lead the design, execution, and ongoing enhancement of the bank's information security and third-party risk programs, including supporting policies, standards, procedures, and governance tools.
• Direct technology, cybersecurity, and vendor risk evaluations, partnering with business units to analyze exposures and assess operational impact in support of continuity planning.
• Assess emerging threats and control effectiveness using recognized security methodologies and benchmark the program against established industry frameworks.
• Oversee key security operations such as access review activities, network oversight, external penetration testing coordination, vulnerability follow-up, and secure data disposal practices.
• Create meaningful dashboards and executive-level reporting that communicate risk posture, program progress, and assessment outcomes to committees, senior management, and the Board of Directors.
• Champion organization-wide security awareness through employee onboarding, targeted communications, phishing follow-up, and tailored education for internal and external stakeholders as needed.
• Act as the primary liaison for technology audits and regulatory reviews by coordinating documentation, organizing responses, and driving corrective actions to completion.
• Track changes in state and federal regulatory expectations, including privacy and security obligations, and recommend program updates based on evolving requirements and industry standards.