> Markdown version of [/jobs/ext/1215699-information-security-officer](https://www.wearedevelopers.com/jobs/ext/1215699-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Officer - **Company:** Fortis LLP - **Location:** Denver, CO, United States - **Experience:** Experienced - **Salary:** $190,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Cyber Security, Disaster Recovery, Intrusion Detection and Prevention, Software Vulnerability Management, Cloud Platform System, IT General Controls (ITGC), Firewalls (Computer Science), Information Technology, Cybercrime - **Published:** July 9, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=d46435e6c1627387 ## About the Role * Bachelor's degree in Information Security, Computer Science, or a related field; Master's degree preferred. * Minimum of 7-10 years of experience in information security, with at least 3 years in a leadership role within the banking or financial services industry. * Proven experience with FDIC examinations, including preparation, participation, and follow-up on findings for banks with assets in the $1-2 billion range. * Demonstrated expertise in conducting and managing other relevant audits, such as financial statement audits, IT general controls audits, and compliance reviews typical for mid-sized community banks (e.g., under GLBA, FFIEC guidelines, and BSA/AML frameworks). * Hands-on experience implementing cybersecurity frameworks, including CRI Profile of NIST Cybersecurity Framework (CSF) 2.0 and CIS 8.1, with a track record of mapping controls to regulator requirements. * Professional certifications such as CISSP, CISM, CRISC, or equivalent. * Strong knowledge of security technologies, including firewalls, intrusion detection/prevention systems, encryption, and endpoint protection. * Excellent communication skills, with the ability to translate complex technical concepts to non-technical stakeholders. * Ability to work in a fast-paced environment and manage multiple priorities effectively. * Strong organizational time management skills, problem solving skills, and the ability to quickly grasp concepts and processes with limited guidance from management. * Strong written and verbal communication skills. * Must be able to work in a team environment with the ability to interact well, and in a positive manner, with co-workers and management. * Strong written and verbal communication skills * A positive and collaborative approach with both peers and management * Versatility, flexibility, and a willingness to work on consistently changing priorities with enthusiasm ## Description The ISO will be responsible for protecting the bank's sensitive data, ensuring compliance with regulatory requirements, and mitigating risks in an evolving threat landscape. This role requires a strategic thinker with deep expertise in banking regulations, including mandatory experience in FDIC examinations and audits for mid-sized banks. The ideal candidate will foster a culture of security awareness while implementing robust frameworks to safeguard our operations, customers, and assets., * Develop, implement, and maintain the bank's information security policies, procedures, and standards in alignment with regulatory requirements and industry best practices. * Lead risk assessments, vulnerability management, and security incident response efforts, including coordination with internal teams and external partners during security incidents. * Oversee the design and execution of security controls for IT systems, networks, cloud environments, and third-party vendors. * Conduct regular security audits, IT risk assessments, penetration testing, and compliance reviews to identify and remediate potential weaknesses. * Collaborate with senior leadership to integrate security into business processes, including new product launches and technology acquisitions. * Manage security awareness training programs for employees and ensure ongoing education on emerging threats. * Prepare and present reports on security metrics, risks, and compliance status to executive management and the board of directors. * Manage the business continuity/disaster recovery program for the Bank, including annual tabletop exercises. * Stay abreast of evolving cyber threats, regulatory changes, and technological advancements to proactively enhance the bank's security posture. * Coordinate with regulators during examinations and audits, ensuring timely response to findings and implementation of corrective actions. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Convincing Product teams to Adopt Gitops in a Large Org](https://www.wearedevelopers.com/videos/1936-convincing-product-teams-to-adopt-gitops-in-a-large-org) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)