> Markdown version of [/jobs/ext/4580719-director-information-security](https://www.wearedevelopers.com/jobs/ext/4580719-director-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director Information Security

- **Company:** Credit Union 1
- **Location:** Anchorage, AK, United States
- **Experience:** Expert
- **Salary:** $124,387 - $188,242
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Disaster Recovery, Information Security Management, Information Technology Audit, Logical Security, Information Technology, Data Analytics, Doctrine (orm)
- **Published:** November 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8802e68e59f5a49c

## About the Role

Master's degree in related field (e.g. information systems, computer science, etc.) or equivalent experience preferred. Job experience commensurate to educational equivalent will be considered. Minimum of ten years of experience in IT security operations or IT auditing required. Knowledge of information security hardware, software and practices that comply with current industry standards. Excellent written and oral communication skills and the ability to communicate technical and security related concepts to both technical and non-technical individuals. Completion of or active pursuit of certification for CISA, CISM or CISSP desired. Must be available for a flexible work schedule including weekends, nights and holidays. Responsible for abiding and complying with the policy for compliance with the Bank Secrecy Act and anti-money laundering laws and regulations (BSA/AML) and the policy for compliance with office of foreign assets control laws and regulations (OFAC).

## Description

* Manages the credit union's information security program, ensuring appropriate safeguards are in place and regularly tested to protect information assets from internal and external threats.
 * Oversees and actively manages the Incident Response, Business Impact Analysis, Risk Management, Disaster Recovery, and Business Continuity Programs.
 * Ensures safeguards, controls, and monitoring are in place to reduce and deter fraud in collaboration with Compliance and Data Analytics resources.
 * Assesses security risk through qualitative risk analysis on a regular basis, conducting functional and gap analyses to evaluate and recommend new information security counter measures against threats to mitigate risk.
 * Performs regular reviews of information security policies and procedures. Makes recommendations for changes to policies and procedures to ensure that they remain compliant with regulatory changes and industry best practices and accommodate new products and activities approved for implementation.
 * Conducts regular reviews and forensic analysis of IT systems to identify suspected or attempted breaches, or policy and procedure violations have occurred, and determines the extent of any damage caused by such incidents.
 * Manages an Insider Risk program to detect whether credit union resources and technology are being misused or exposing the organization to elevated levels of risk. Prepares periodic information security management reports for the IT Steering Committee and/or Board of Directors.
 * Serves as the primary point of contact for information requests relating to the credit union's information security program from credit union management, auditors, and examiners.
 * Provides input and performs risk assessments for new vendors, significant changes to the IT infrastructure, as well as periodic information security risk assessments on critical products.
 * Partner with colleagues across Credit Union 1 to foster a culture of security, promote shared accountability, and continuously strengthen security practices, awareness, and technology risk management in all aspects of the business., * Demonstrates support for the corporate mission, vision, and values.
 * Maintains a positive working relationship with department personnel, including management, supervisory, and all other employees.
 * Meets the current standards as established for the department in the completion of all assigned duties.
 * Community service is required of all management staff. While some may occur during work hours with the permission of the President, some must also occur outside of normal working hours, at a minimum of twice per year. Community service is defined as serving on a non-profit board of directors, and participation in other social services events. In addition, attendance at management mandated events will be required.
 * Responsible for the department's participation in every aspect of the Record Retention program. This includes the creation, identification, use, storage, and destruction in accordance with the policy.
 * Performs other duties as assigned.