Information Security Manager

* Must reside in the state of CO on start date. Relocation assistance is not provided*

**If candidates are related to living with dating or in a familiallike relationship with a current FirstBank employee or FirstBank Board of Director they cannot be considered at this time**

**This is a hybrid position requiring at least 2 days a week in office**

***FirstBank does not sponsor work visas***

Salary Range

$125000 $155000

Founded in 1963 FirstBank is Colorados largest locally owned holding company and we are still growing serving customers in Colorado and Arizona. Our growth can be attributed to one simple philosophy: do right by customers communities and employees which is at the center of the companys banking for good mantra. FirstBank believes that diversity equity and inclusion are part of everything we do both within and outside our company and we take pride in hiring and training a diverse and talented group. We strive to not only maintain a diverse workforce but also ensure our employee experience garners a sense of belonging is inclusive and equitable. FirstBank believes that a company is nothing without the people that comprise it. By joining the FirstBank team you will experience our great team culture with ample opportunity for growth. Theres an opportunity for everyone with positions across the company from Personal Banker and Call Center to Technology and Lending. Apply today to learn more and join the team!

A Brief Overview

The IT Manager of Security is responsible for the oversight and implementation of the security strategy. They will manage employees of the Security team to ensure the highest standards of security controls for the organization. They are responsible for prevention detection and response controls for the company.

What you will do

• Oversee the security controls for the organization.
• Ensure best practices are followed when implementing new processes or technology.
• Define develop and implement the security architecture for the company.
• Play a critical role in managing the successful response to a wide range of potential incidents.
• Coordinate the daily activities and training of Security staff to develop their technical expertise.
• Assign tasks and projects to Security staff; monitor progress of projects and task assignments to ensure work is being completed by agreed upon time frames.
• Make decisions as necessary to keep projects on schedule.
• Monitor industry trends and provide guidance to the company as appropriate.
• Train other personnel on the companys security policies and procedures; maintain and update companywide security training programs.
• Coordinate with law enforcement to ensure all crimes against FirstBank are properly handled.
• Perform other duties and projects as assigned.
• Understand and comply with all provisions of the Safety in the Workplace policy.

Supervises the work of a group of direct reports. Responsible for performance management and evaluations; hiring and staffing scheduling. Enforces policies and procedures. Directs daytoday work of employees through supervision of lead staff or directly. Supervisory responsibilities may be limited to a specific shift or a portion of a function facility or location. May assist with training and payroll. Coaches and develops staff.

Minimum Requirements

• Typically requires a bachelors degree in related field and a minimum of 5 years of related experience and prior supervisory or management experience.
• A combination of posthigh school education job related certification and related experience equivalent to 7 years may be considered in lieu of minimum requirements

Preferred Requirements

• Bachelors degree in Computer Science or other technical field
• Minimum of six years related work experience
• Strong background in information security and associated best practices
• Handson knowledge of security technologies and frameworks

Knowledge Skills and Abilities

• Strong organizational skills; ability to balance responsibilities for multiple projects
• Excellent verbal and written communication skills
• Excellent understanding of vulnerability management methodologies and practices
• Good understanding of data communication topologies protocols various types of data communications equipment and FirstBank network structure
• Excellent understanding of the following technologies: VPN IPSEC DKIM SPF DMARC DNS SMTP Red Team testing methodologies Penetration Testing SANS CSC 20 critical controls
• Excellent understanding of web application technologies and exploits including OWASP Top 10 Cross Site Scripting (XSS) SQL Injection Cross Site requireduest Forgery (CSRF)
• Excellent knowledge of how security is implemented in networking equipment and on various platforms; knowledge should include a thorough understanding of firewalls packet filtering routers and security mechanisms implemented in various operating systems databases and applications
• Strong understanding of various security technologies including remote access systems strong authentication techniques encryption and digital certificates
• Excellent knowledge of various security tools including syslog analyzers intrusion detection software penetration scanning software and auditing software
• Strong knowledge of law enforcement practices and the ability to successfully support and interact with law enforcement during an emergency including physical security best practices and their implementation
• Strong understanding of cloud technologies and how to properly secure them

Working Conditions and Physical Requirements

• Frequently remains stationary throughout a typical business day
• Frequently operates a computer and other office machinery such as a calculator copy machine and computer printer
• Occasionally moves about inside the office to access file cabinets office machinery and other rooms
• Occasionally positions self to access drawers and shelves of various heights
• Frequently reaches for and handles paperwork and files
• Constantly communicates with customers coworkers and management inperson and on the phone
• Must be able to exchange accurate information
• FirstBank does not currently offer fully remote positions except as required by law. The actual number of inoffice days that may be required will vary by business unit role and business need.

Statement of Benefits

FirstBank offers a suite of benefits that support our employees professional financial physical emotional and spiritual wellbeing. Benefits currently offered with our positions include: Paid Time Off/paid leave programs 401K/Employee Stock Ownership United Healthcare medical MetLife dental VSP vision Employee tuition reimbursement Volunteer Time Off ShortTerm Disability LongTerm Disability and Group Life Insurance/AD&D


EOE/Affirmative Action

FirstBank is an EOE/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to age race color religion sex sexual orientation gender identity national origin genetic information disability veteran status or any other legally protected characteristic. FirstBank does not permit pay inequities. Anyone who believes they have been subject to pay inequity should immediately report their concerns to the Human Resource Department.

Colorado Job Application Fairness Act

Under Colorados Job Application Fairness Act you have the right to redact from any documents that you submit in connection with your application information that identifies your age date of birth or dates of attendance at or graduation from an educational institution. Should you wish to exercise your right to redact such information please redact it prior to submitting the documentation

*This opportunity is expected to close by 5/16/2025*

*This opportunity has been extended to 5/23*

Required Experience:

Manager