[Hiring] Vice President, Cybersecurity @Quorum Federal Credit Union

Role Description

The Vice President of Cybersecurity serves as the senior cybersecurity leader for the credit union and reports directly to the COO. This role leads the enterprise cybersecurity program as a standalone risk function, with responsibility for strategy, governance, cyber risk oversight, regulatory engagement, and executive-level reporting, while remaining separate from daily technology delivery.

What You’ll Be Doing:

• Develop and lead the enterprise cybersecurity strategy, roadmap, policies, and governance structure in alignment with the credit union’s risk appetite and business objectives.
• Oversee information security risk management, including risk assessments, control maturity, issue remediation tracking, and alignment to regulatory expectations.
• Establish and oversee an enterprise cybersecurity assessment and assurance program, including periodic internal security assessments, independent third-party assessments, penetration testing, vulnerability assessments, and security maturity reviews. Findings should be prioritized, tracked through remediation, and regularly reported to executive leadership.
• Lead security-related regulatory, audit, and board reporting, including updates on cybersecurity posture, incidents, third-party exposure, and emerging threats.
• Establish and oversee the credit union’s third-party cybersecurity risk program, including due diligence standards, control reviews, contract security provisions, and ongoing monitoring.
• Provide executive oversight for IAM, cloud, and security architecture standards.
• Own cybersecurity incident response leadership at the executive level, including escalation management, tabletop exercises, post-incident reporting, and lessons learned.
• Lead Business Continuity, Disaster Recovery, and Cyber Resilience planning.
• Lead AI and data governance efforts related to cybersecurity, including secure use of AI tools, model oversight coordination, data protection controls, and governance expectations.
• Partner with Digital Delivery, Infrastructure, Risk, Compliance, Internal Audit, Legal, and business leaders while maintaining independent cybersecurity oversight.
• Supervise the Security Operations Manager and ensure effective day-to-day execution of operational security activities.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, computer science, business, or a related field; advanced degree preferred.
• 10 or more years of progressive cybersecurity experience, including senior leadership responsibility in financial services or another regulated industry.
• Demonstrated experience with security strategy, governance, incident response, identity, cloud security, third-party risk, and board/regulatory reporting.
• Strong working knowledge of financial services control expectations and frameworks such as FFIEC, GLBA, NIST, and related regulatory guidance.
• Proven ability to communicate technical risk in clear business terms to executive leadership and boards.
• Relevant certifications preferred, such as CISSP, CISM, CRISC, or equivalent.

Requirements

• Executive presence and board-ready communication style.
• Business-oriented leadership mindset with strong risk judgment.
• Ability to balance strategic oversight with practical execution.
• Strong collaboration skills with enough independence to provide credible challenge.

Benefits

• Excellent health insurance packages with a Health Reimbursement Account option.
• Life, AD&D, Short-Term Disability and Travel Insurance.
• 401k plan with company match dollar for dollar up to 6 percent.
• Generous time-off policy with paid time off (PTO), volunteer time off (VTO), birthday PTO, and company-observed holidays.
• Monthly stipend for wellness activities and mental health.
• Tuition reimbursement.
• Pet Benefits, including insurance, discounts, “pawternity” PTO day, and more.
• Bonus/commission plan for qualifying roles.
• Employee perks (including mortgage discounts).
• PTO purchase and sell-back programs.
• Rewards and peer recognition programs.
• Trust-based, outcome-oriented remote work environment for most roles.