JOB SUMMARY:

CFSB is seeking an experienced and detail-oriented Director, Head of Cybersecurity to lead our Security Ops team and ensure the highest standards of security for our products/services. As Director, Head of Cybersecurity you will be responsible for setting the strategic direction for cybersecurity initiatives and establishing a forward-thinking security strategy. You will work closely with CFSB’s CTO and CISO to ensure the organization operates within industry standards. Your responsibilities will include fostering innovation, adapting to emerging threats, and maintaining positive stakeholder relationships.

As the Director, Head of Cyber Security, you will be a key driver of the strategy to align cybersecurity efforts with broader organizational objectives. You will drive cybersecurity programs and help critical product families achieve secure posture. You will play a crucial role in shaping CFSB’s external reputation as a trusted and secure business partner, contributing to the organization's resilience and success in the dynamic landscape of cybersecurity. The ideal candidate will have extensive experience in cyber security, a deep understanding of current and emerging threats, and strong leadership capabilities.

Responsibilities:

• Monitoring and Detection: Implement and manage security monitoring tools and systems to detect and respond to suspicious activity
• Vulnerability Management: Conduct regular vulnerability assessments and penetration testing
• Security Policies and Procedures: Develop, implement, and enforce security policies, procedures, and best practices to ensure compliance with regulatory requirements
• Compliance and Audits: Ensure that the organization’s security practices comply with relevant regulations and standards. Assist with security audits and assessments.
• Incident Documentation and Reporting: Document security incidents and actions taken in response
• Support Engineering teams, customer, and Cyber Security organization to lead and steer critical programs
• Provide high-level leadership to the IT Infrastructure and Security teams, overseeing all aspects of cybersecurity operations
• Represent the cybersecurity department in discussions with regulatory bodies, auditors, and external stakeholders
• Report regularly to leadership on the overall performance and status of the cybersecurity department

Knowledge, Skills, and Abilities:

• Strong knowledge and history of running programs with cross functional teams with internal and external stakeholders
• Excellent communication (written and oral) and leadership skills
• Understanding of ‘security by design’ principles and architecture level security concepts
• Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
• Working knowledge of Cyber security frameworks – i.e. ISA/IEC 62243, NIST 800-53, NIST RMF, etc.
• Understanding of development methods and methodologies – i.e. Agile, SAFe, SCRUM, etc.
• Understanding of DevSecOps
• Experience conducting secure product reviews leveraging both automated (i.e. SAST, DAST, SCA, etc.) & manual activities (Penetration Testing)
• Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP or CISSP

Education, Training, and Experience:

• BS or MS in Computer Science or in any related field and Industry certifications such as CISSP or CSSP
• 10+ years familiarity securing Cloud, Mobile or Client/Server software (including embedded software systems)
• 10+ year’s experience in technology, cybersecurity
• 6+ years leadership experience

Salary Range: $165,000 - $200,000 / year

"Base salary range does not include performance-based bonus and/or other benefits, where applicable. Actual base salary offer will vary based on skills and experience."

About Community Federal Savings Bank (CFSB)

Community Federal Savings Bank (CFSB) is a federally chartered bank founded in 2001 and headquartered in New York City. CFSB has focused on providing superior service and added value to clients though a solid understanding of relationship banking. We offer a full range of services, including loans, bill payments, card services, internet banking, and merchant processing.

We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, military and/or veteran status, or any other Federal or State legally-protected classes.