Information Security Specialist

Job Summary:

Responsible for providing oversight of the bank's Business Continuity Program and Vendor Management Program in compliance with Federal regulations.

Education/Experience:

A minimum of the following education/experience is required: Associate degree and 4 years' experience in vendor or risk management, or BCP; OR Bachelor's degree and 2 years' experience in vendor or risk management, or BCP.

Job Specific Responsibilities:

Administers, maintains, and oversees the bank's third-party risk management program in accordance with FFIEC and GLBA requirements. Conducts and documents information security due diligence for vendors, including reviews of SOC 1/2 reports, cybersecurity assessments, and risk questionnaires. Evaluates vendor controls related to data security, privacy, and resilience prior to onboarding and during periodic reviews. Ensures vendor contracts include appropriate information security, confidentiality, and business continuity requirements. Tracks, documents, and remediates vendor-related risks and findings, coordinating with business owners and vendors. Develops, maintains, and tests the bank's Business Continuity and Disaster Recovery (BCP/DR) programs. Performs business impact analyses (BIA) to identify critical systems, services, and recovery requirements (RTOs/RPOs). Coordinates and documents annual BCP/DR tests and tabletop exercises. Assesses third-party vendors' BCP/DR capabilities to ensure continuity of critical banking services. Supports incident response and recovery efforts during business disruptions. Maintains policies, procedures, risk assessments, metrics, and reporting related to third-party risk and operational resilience. Serves as subject matter experts on vendor risk and business continuity for the bank. Provides guidance and training to employees on third-party risk and continuity expectations. Other duties as assigned.

Required Technical Knowledge:

General computer skills Microsoft Office, specifically Word and Excel Expectations of an

Employee:

Works well independently Treats all customers and fellow employees with respect Exceeds customer expectations Meets customer needs Maintain confidentiality of all bank records Conducts interactions with honest, ethical, and strong moral principles Performs at the highest level Takes responsibility for actions Does what is expected Leads by example and takes initiative Works as a team Efficiently shares information in a collaborating and proactive manner Pays attention to detail Solves problems Makes sound decisions Manages time effectively Prioritizes effectively Performs multiple tasks simultaneously Shows up for work and is on time Complies with all laws and regulations Completes all required training Adheres to

Bank Values Supervisory Responsibilities:

None Amount of Travel:

None Physical Requirements:

May need to sit/stand for long periods of time Sustained visual concentration while working at the computer Typing on a keyboard for long periods of time Handle high stress environment Maintain professional appearance

Benefits Include:

Medical, Rx, Dental, and Vision insurance HSA, FSA, and Limited FSA Employer paid and voluntary Life Insurance/AD&D Short-Term Disability Long-Term Disability Accident/Hospital Indemnity/Critical Illness voluntary plans Identify Theft Protection 401k with employer match Vacation, Sick Leave, and Holiday pay Tuition Reimbursement Gym membership discounts Annual payrate increases Incentive based bonuses It is the policy of FirstBank Southwest to provide equal opportunity employment (EOE) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, FirstBank Southwest will provide reasonable accommodations for qualified individuals with disabilities. FirstBank Southwest is an affirmative action employer.