EVP CIO & CISO

The EVP, Chief Information Officer & Chief Information Security Officer (CIO/CISO) is a business-first technology executive who serves as a core member of TCM Bank’s leadership team, reporting directly to the President & CEO. TCM Bank exists with a distinctive and purpose-driven mission-serving as the primary credit card issuing partner for community banks across the country, providing a wide range of credit card products that help them better serve their own customers and communities. In this context, the CIO/CISO is not simply a technology operator; they are a strategic growth enabler whose decisions directly shape TCM Bank’s ability to deliver on that mission.

The CIO/CISO will work closely with the EVP and Chief Risk Officer to integrate technology and cybersecurity, partner with other executives, and regularly engage with the Board of Directors and its Technology, Product, and Risk Committees to provide strategic direction, governance, and oversight.

This executive will act as the principal architect of the Bank’s long-term digital evolution, spearheading the multi-year migration from a legacy, mainframe-based server infrastructure into a modernized, agile, cloud-centric bank payment provider platform. Collaborating closely with business teams and the EVP, Chief Risk Officer, the CIO/CISO will ensure this transformation is executed without compromising operational resilience, proactively mitigating regulatory and cyber risks, and continuously advancing the Bank’s PCI-DSS and SOC2 Type II compliance and attestation goals.

STRATEGIC VALUE OF THE COMBINED ROLE The intentional integration of the CIO and CISO functions into a single executive position reflects TCM Bank’s commitment to security-by-design and technology excellence. This structure positions the Bank to respond with agility to an evolving threat landscape while maintaining operational excellence and regulatory compliance.

KEY AREAS OF ACCOUNTABILITY Technology Strategy & Digital Evolution

• Develop and own the Bank’s multi-year technology strategy, aligning prior investments and new initiatives with macro business needs-including a data environment that enables smarter, faster decision-making across the enterprise.
• Serve as the principal architect and executive sponsor of the Bank’s migration from legacy, mainframe-based server infrastructure to a modernized, agile, cloud-centric payment provider platform-delivering this transformation on time, within risk parameters, and without disruption to operations or community banking partners.
• Apply strong commercial acumen to technology investment decisions-evaluating build, buy, and partner options with a clear lens on ROI, risk, and strategic fit.
• Partner closely with business leaders and lead IT team to deliver technology and security capabilities that advance the Bank’ strategic priorities and enhance service. Oversee enterprise IT operations-including infrastructure, cloud platforms (Microsoft Azure), networks, applications, vendor management, and end-user support-with an unwavering focus on reliability, scalability, and service quality.

Cybersecurity Program Leadership

• Own and continuously mature the Bank’s enterprise information security program-including policies, standards, procedures, and controls-proactively staying ahead of an evolving threat landscape.
• Direct cybersecurity risk management-identification, assessment, mitigation, and executive reporting-in close partnership with the EVP, Chief Risk Officer, ensuring cyber risk is managed within the Bank’s defined risk appetite.
• Serve as the executive commander during cybersecurity incidents-leading response, communications, and recovery with speed, clarity, and composure.
• Lead security operations including threat detection, vulnerability management, incident response, identity and access management (IAM), and disaster recovery.

Regulatory Compliance & Risk Governance

• Ensure full compliance with applicable regulatory and legal requirements including FFIEC, OCC, Dodd-Frank, SOX, and PCI-DSS-proactively mitigating regulatory risk and advancing the programs.
• Establish governance frameworks for data management, privacy, access control, and information protection that are built for scale and aligned with the Bank’s strategy.
• Direct swift, thorough remediation of audit and assessment findings, and manage third-party and vendor security assessments with the same rigor applied to internal controls.
• Partner with Audit and Risk on enterprise cybersecurity awareness, training programs, and New Hire Security onboarding-building a culture in which compliance is understood as everyone’s responsibility.

Business Continuity & Operational Resilience

• Develop, maintain, and regularly test business continuity and disaster recovery plans that reflect the Bank’s evolving infrastructure and risk environment.
• Manage enterprise technology budgets and cybersecurity investments with financial discipline, ensuring strategic vendor relationships and contract negotiations deliver maximum value.
• Define and track KPIs and security metrics that provide meaningful visibility into technology performance and security posture-translating data into actionable intelligence for executive and board audiences.

Executive Communication & Board Engagement

• Deliver high-impact technology and cybersecurity reporting to the CEO, executive leadership team, and the Board-including the Board’s technology, product, and risk committees-translating complex technical realities into clear business context and strategic direction.
• Serve as a visible and credible external voice for TCM Bank’s technology capabilities and security posture-instilling confidence in community banking partners, regulators, and auditors alike.
• Build cross-functional relationships across the enterprise that firmly position technology and security as strategic business enablers-not gatekeepers or cost centers.

People Leadership & Culture

• Build and lead a high-performing technology organization-effectively managing a hybrid ecosystem of in-house talent and strategic outsourced vendor partnerships, ensuring the team is structured, skilled, and motivated to execute at the pace the Bank’s transformation demands.
• Develop talent pipelines, succession plans, and career pathways within the technology organization-attracting and retaining top-tier professionals in a competitive market.
• Model inclusive, accountable leadership and champion a culture of continuous improvement in which security awareness and innovation are shared responsibilities across every level of the enterprise.
• Perform other related duties as required.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field required; advanced degree (MBA, MS) preferred.
• 15-20 years of progressive IT leadership experience, with a minimum of 10 years in a senior leadership role with dual accountability for technology operations and information security.
• Demonstrated track record of leading technology and security programs in a regulated financial services or banking environment.
• Experience supporting remote and distributed workforces.
• Preferred experience supporting a customer-facing contact center environment including IP PBX, IVR, Workforce Management Software, and call analytics platforms.

Certifications (Required)

• CISSP (ISC²) or CISM (ISACA) required; CRISC, CGEIT, or equivalent advanced certifications strongly preferred.
• Additional certifications in cloud security (e.g., CCSP, AWS/Azure security) are a plus.

Technical Knowledge

• Deep knowledge of network technologies, architectures, topologies, hardware, software, and cloud service provider environments, including Microsoft Azure.
• Expertise in systems and application technologies: servers, SANs, Microsoft SQL databases, physical security and access control systems, MFT applications, inventory management, AIS, and ITSM platforms.
• Extensive knowledge of information security programs: encryption, data protection, privileged access management, and security frameworks as applied to PCI-DSS and SOC2 Type II.
• Proficiency in cybersecurity industry frameworks (NIST CSF, CIS Controls, ISO 27001) and OCC audit requirements within a remote environment.
• Knowledge of FFIEC and banking regulatory requirements as they apply to cybersecurity and technology solutions.

Leadership & Executive Competencies

• Proven ability to make high-stakes decisions with significant financial and operational impact.
• Exceptional verbal and written communication skills for audiences ranging from technical teams to the Board of Directors.
• Outstanding analytical, problem-solving, and strategic thinking skills in a fast-paced, high-pressure environment.
• Strong results orientation in performance management, resource planning, capacity planning, and organizational leadership.
• Executive presence and the credibility to represent TCM Bank with regulators, auditors, vendors, and external stakeholders.

2.92.9 out of 5 stars Remote $215,000 - $275,000 a year - Full-time, Pulled from the full job description

• Continuing education credits
• Tuition reimbursement
• Paid parental leave
• Parental leave
• 401(k)
• Health insurance
• 401(k) matching, TCM Bank, N.A. embraces the diversity of its applicants and employees and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status or any other characteristic protected by applicable law. The actual compensation offered to the candidate will be finalized at the offer and may be above or below the posted range due to skill level, experience, industry-specific knowledge, education/certifications, etc. The offer rate represents one component of TCM Bank’s total compensation package. Employees will also receive several benefits as listed below. Other compensation for this position may include bonus eligibility in the TCM Bank Annual Bonus Plan.

Benefits Offered:

• Competitive medical, dental and vision benefits
• 401(k) and Roth 401(k) retirement plans with company match
• Flexible spending accounts (medical and dependent care)
• Company-paid parental leave
• Educational assistance
• Company-paid continuing education credits
• Paid employee assistance program
• 12 paid holidays, including (3) Paid Employee Appreciation days each year, (2) Celebrate You Days for your Birthday & Anniversary, and company events. (More than your average company!)
• Multiple time-off options for vacation, volunteering, or caring for yourself or loved ones.

TCM Bank is in Tampa, FL. This is a remote opportunity. If living outside of the area, travel expectations would be at least 4 times (overnight travel) per year. Qualified candidates located in the states where we do business will be considered: AL, AZ, DC, FL, GA, IA, KY, MA, MD, MI, MO, NE, NC, OH, PA, SC, TX, & VA.