---

Home location at any one of our convenient locations including our main office in Derby, VT

BASIC SUMMARY:

Responsible for the ongoing management of the Information Security Program and related policies, procedures, risk assessments, and training tools in order to maintain the confidentiality, integrity, and availability of bank information systems and information assets. Responsible for coordinating information security efforts across business departments, ensuring that policies and procedures are appropriate and consistent with daily practices and accountable for ensuring appropriate controls are in place to protect the bank against security threats.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Ensure compliance with the Information Security Program, Vendor Management Program, Security Incident Response Plan and Business Continuity Management Plan.

• Responsible and accountable for the day-to-day implementation and management of the Information Security Program and security directives as mandated by the Gramm-Leach-Bliley Act (GLBA).

• Understand data flows to ensure that appropriate administrative, physical and technical safeguards are in place to protect information assets from internal and external threats.

• Perform or manage ongoing information risk assessments to ensure that information systems are adequately protected and gaps are identified.

• Keep abreast of changes to existing and proposed State and Federal legislation and regulatory laws and restrictions pertaining to information security.

• Monitor emerging risks and implement mitigations.

• Lead information security awareness and training initiatives to educate employees and the board about cyber-security and information risks, to include the ID Theft Program.

• Coordinate the maintenance of the disaster recovery and business continuity plans, procedures and testing.

• Develop and manage the Incident Response Management Plan, procedures and testing.

• Manage the investigation of security breaches or potential breaches.

• Participate in any applicable Change Management processes.

• Review internal network activity reports for unusual or inappropriate activity.

• Manage the Vendor Management program, to include evaluating current and new vendor relationships.

• Comply with Code of Ethics standards and all applicable bank compliance laws and regulations

• Perform all other related duties as assigned.

• All officers will be expected to demonstrate excellent interpersonal skills and a commitment to high quality personal service to our customers and to other departments and employees within the bank. All officers should have good communication skills and be willing to pursue appropriate continuing education.

​