Information Security Officer

Job Description

Job Description

This position reports on-site.

Summary : The individual is responsible for developing, implementing, and managing a comprehensive information security program. This includes creating and enforcing security policies, conducting risk assessments, and overseeing incident responses to protect First Foundation's data and systems from cyber threats.

Duties and Responsibilities :

• Understands and complies with requirements of all laws and regulations applicable to position
• Develop, implement, and oversee a strategic, enterprise-wide Information Security Policy and Program
• Monitor and report on the effectiveness of the security program using established metrics and KPIs
• Lead the Information Security Risk Assessment process, including risk identification, evaluation, and mitigation strategies
• Design and deliver a Security Awareness Training Program to educate employees on security policies and best practices
• Provide strategic risk guidance for IT initiatives, including the evaluation and recommendation of technical controls
• Promote awareness of regulatory requirements, industry standards, and emerging threats across the organization
• Establish and maintain the Bank’s Security Incident Response Plan, including technical procedures and escalation protocols
• Act as the incident commander during security events, coordinating with the CTO, Incident Response Team, and external vendors
• Manage and execute strategic security projects, ensuring alignment with organizational goals and timelines
• Advise senior management through regular reports and consultations on cyber and physical security matters
• Collaborate with department heads to ensure protection of employees, clients, facilities, assets, and proprietary information
• Coordinate with IT and business units to assess, implement, and monitor information security risks and controls
• Perform other duties as assigned

Supervisory Responsibilities : This position may have direct supervisory responsibilities.

Salary Range : The salary range budgeted for this position represents the Company's good faith minimum and maximum range for this role at the time of posting. The compensation offered to a candidate may vary depending on several factors, including a candidate's qualifications, skills, competencies, experience, and location.

Geographic Location :

Applicants must have current work authorization when accepting a First Foundation Inc. position. Currently, we cannot sponsor or take over the sponsorship of an Employment Visa.

Qualifications : To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and / or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Education and / or Experience :

Skills :

Physical Demands :

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel; and talk or hear. The employee frequently is required to stand, walk, and reach with hands and arms. The employee is occasionally required to stoop or kneel. The employee must occasionally lift and / or move up to 50 pounds (Computer Equipment). Specific vision abilities required by this job include close vision, distance vision, peripheral vision, and ability to adjust focus (heavy use of computer terminal).

First Foundation is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, status as a qualified individual with a disability, sexual orientation, gender identity, or any other characteristic protected by law.