Senior Information Risk Officer

Description

About Us

Umpqua Bank is headquartered in the Pacific Northwest with 5,000+ employees and offers banking services to customers throughout the nation. It’s an especially exciting time to join our team as, following the recent merger with Columbia Bank, we have grown to become a leading western-based regional bank with more than $50B in assets under management and an unwavering commitment to our associates, our customers, and our communities.

We create a great place to work by offering a special brand of relationship banking and by providing a culture where associates thrive. Associates who embody our core values fit in well here and we are eager to meet candidates who demonstrate behaviors that align with Trust, Ownership, Growth, Empathy, Teamwork, Heart, Enjoyment, and Relationships.

About the Role

Responsible for leading Cybersecurity and IT governance, risk, and compliance efforts, including the establishment and maintenance of IT operating model and facilitating the development of technology policies and standards.

Maintain governance documentation detailing how information should be secured including the maintenance and development of internal process/procedure documentation including but are not limited to technology and cybersecurity policies and standards. Perform formal risk analysis and self-assessments for technology processes, leveraging industry standards like CIS, ITIL, and COBIT to build a unique program for Umpqua Bank. Analyze internal technology and security controls to ensure compliance with documented and approved standards. Ensure that information systems within environment comply with company policies, standards, and procedures. Drive and provide advisory and subject-matter expertise to technology teams and business units for cybersecurity compliance readiness. Responsible for tracking and monitoring gaps in the cybersecurity program. Maintain cybersecurity gap analysis documents; gather necessary information from technology and lines of business to identify areas to improve banking practices. Lead the process to identify new assets, perform the risk evaluation process to determine the risk ranking. Facilitate and liaise with technology leaders, key corporate risk groups (including Internal Audit, Corporate Compliance, Enterprise Risk Management, Legal) to ensure TAG is aligned with these groups and meeting obligations.. Demonstrate compliance with all bank regulations that apply to your position and keep up to date on regulation changes. Maintain working knowledge of our policies and procedures regarding the Bank Secrecy Act, Regulation CC, Regulation E, Bank Security, and other regulations that apply to your position.

About You

H.S. Diploma/GEDBachelor's Degree in computer science or equivalent7-10 years of experience in or a combination of information security, IT audit, or information technology operations. Required. Knowledge of risk management processes including internal audit and information security management. Experience evaluating controls relative to information security frameworks such as ISO 27002, NIST 800 series, or financial services regulatory frameworks such as the FFIEC IT booklets and Cybersecurity Assessment Tool (CAT). Knowledge of systems and network concepts including: access, authorization, configuration, and design. Demonstrated understanding of information security concepts including: encryption, access controls, network security, security operations, security architect, threat modeling and design. Knowledge of applicable regulatory requirements including PCI DSS, GLBA and HIPAA. Ability to operate in a cross-functional environment, build, and foster relationships with other departments and stakeholders. Ability to anticipate and respond to changing priorities and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness.

Work Style

Umpqua Bank offers a Flexible Workplace Program and this opportunity comes with the Full Office work style which is working in office from a designated company location five days weekly.

Our Benefits

We offer a competitive total rewards package including base wages and comprehensive benefits. The pay range for this role is $76,603.59-$142,263.81 and the pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation and those details will be provided during the recruitment process.

We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.

Our Commitment to Diversity

Umpqua Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: [email protected]

To Staffing and Recruiting Agencies

Our posted job opportunities are only intended for individuals seeking employment at Umpqua Bank. Umpqua Bank does not accept unsolicited resumes or applications from agencies and Umpqua Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Umpqua Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.