Chief Information Security Officer

About the job

Your Career. Your Story. Let's Write the Next Chapter Together.

At Origin Bank, a job isn't just a paycheck - it's a meaningful journey. We're committed to helping you grow both professionally and personally in an environment where people come first. We offer a competitive total rewards package, including generous benefits and compensation tailored to your skills, experience, and education.

What truly sets us apart is our people-first culture. Here, you'll be supported by unique initiatives like our Dream Manager program, one-on-one guidance from a nationally certified health and wellness coach, and free access to certified financial professionals who are here to help you plan for your future.

If you're looking for a career that empowers you to make meaningful connections, positively impact others, and pursue your personal and professional dreams-we'd love to meet you.

Job Description

The Chief Information Security Officer (CISO) is a senior leadership role responsible for the development, implementation, and ongoing oversight of the Bank’s enterprise information security, cybersecurity, and data protection program.

This role will support the Bank’s ability to protect the confidentiality, integrity, and availability of information assets while aligning cybersecurity practices with business objectives, regulatory expectations, and the Bank’s risk appetite framework.

The CISO operates with appropriate independence within the Risk organization and provides objective oversight, escalation of cybersecurity risks, and subject matter expertise to executive leadership, Board committees, and business stakeholders. The role is accountable for maintaining a sound control environment, effective risk management processes, and regulatory readiness.

The preferred work location for this role will be based within one of our Louisiana, Texas, Alabama, Florida, or Mississippi markets.

Information Security Governance & Program Leadership

• Develops, implements, and manages the Bank’s enterprise information security program in alignment with strategic priorities and risk appetite
• Establishes and maintains information security policies, standards, and procedures consistent with regulatory guidance and industry frameworks
• Provides regular reporting to the Chief Risk Officer and senior leadership on:
  • Cybersecurity risks and emerging threat landscape
  • Key risk indicators (KRIs) and program performance
  • Control effectiveness and remediation status
• Supports Board and Risk Committee reporting by preparing materials and analysis as needed
• Promotes enterprise-wide security awareness and accountability

Control Assurance & Monitoring

• Oversees the design and operation of key cybersecurity controls and monitoring processes
• Supports control assurance activities, including:
  • Control validation and testing coordination
  • Vulnerability management and remediation tracking
  • Ensures control issues are identified, escalated, and remediated in a timely manner
• Partners with Internal Audit and Risk teams to support independent testing and validation efforts

Threat Protection & Security Operations

• Oversees day-to-day security operations, including monitoring, detection, and response processes
• Directs threat intelligence, vulnerability management, and penetration testing activities
• Ensures effective implementation of core security controls, including:
  • Identity and access management
  • Data protection and encryption
  • Endpoint and network security
• Supports continuous improvement of detection and response capabilities

Incident Response & Resilience Coordination

• Maintains the Bank’s cyber incident response framework and supporting procedures
• Coordinates response to cybersecurity incidents in partnership with Technology, Risk, Legal, and leadership teams
• Conducts post-incident reviews and supports remediation tracking
• Facilitates cyber incident tabletop exercises and scenario testing with key stakeholders
• Aligns cybersecurity incident response with broader business continuity and disaster recovery plans

Third-Party Risk Oversight

• Supports the Bank’s third-party cybersecurity risk management program across the vendor lifecycle:
  • Due diligence and onboarding
  • Ongoing monitoring
  • Issue Identification and remediation
• Works with Vendor Management, Risk, and Legal to ensure third-party security expectations are met
• Provides risk assessments and recommendations for third-party engagements

Data Protection & Privacy Alignment

• Supports the Bank’s data protection strategy, including:
  • Data classification and handling standards
  • Protection of sensitive and confidential information
  • Coordinates with Legal, Compliance, and Risk to ensure alignment with privacy requirements
• Monitors controls designed to prevent unauthorized data access or loss

Technology & Emerging Risk Advisory

• Partners with Technology teams to ensure security considerations are incorporated into system design and implementation
• Provides input into risk assessments for:
  • Cloud environments
  • Digital transformation initiatives
  • Emerging technologies (e.g., AI, APIs, fintech integrations)
• Promotes consistent application of secure development and architecture practices

Regulatory & Audit Support

• Supports regulatory examinations and audits related to cybersecurity and information security
• Assists in the preparation and coordination of responses to regulatory and audit inquiries
• Tracks and supports remediation of findings, including documentation and evidence collection
• Maintains documentation to demonstrate compliance with applicable regulatory expectations

Leadership & Collaboration

• Serves as a key advisor to Risk leadership and business units on cybersecurity matters
• Builds relationships with internal stakeholders, auditors, and external partners
• Leads and develops the Information Security team, including talent development and performance management
• Promotes a collaborative, risk-aware culture across the organization

Supervisory Responsibilities

Manages the Information Security function, including cybersecurity operations and risk support activities. Responsible for staffing, performance management, and alignment with departmental and enterprise risk priorities.

Qualifications:

Qualifications

Education and Experience

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field required; advanced degree preferred
• 8–12+ years of experience in cybersecurity, information security, or IT risk management
• 5+ years of leadership experience within a financial services or regulated environment
• Experience supporting regulatory examinations and interacting with senior leadership

Certifications (Preferred)

• CISSP
• CISM
• CRISC or comparable

Skills

To perform the job successfully, an individual should demonstrate the following skills:

Culture & Conduct Expectations

• Demonstrates alignment with the Bank’s core values and risk culture
• Promotes shared accountability for cybersecurity across the organization
• Maintains professionalism, integrity, and confidentiality

Physical Demands

While performing the duties of this job, the employee is frequently required to stand; walk; sit; use hands to finger, handle, or feel and talk or hear. The employee is occasionally required to reach with hands and arms; climb or balance and stoop, kneel, crouch, or crawl. The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision and ability to adjust focus.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
This position operates in a professional banking environment and routinely uses standard office equipment and digital tools such as secure financial systems, computers, phones, photocopiers, and scanners. The role requires maintaining a high level of professionalism, confidentiality, and attention to detail in all interactions.
Work is typically performed in a corporate office setting with a moderate noise level and a dynamic, collaborative, and inclusive workplace where innovation thrives. Expect a fast-paced, supportive atmosphere where your ideas are heard, and your contributions make an impact. This role may occasionally require travel.
This job description reflects management's assignment of essential functions. It does not prescribe or restrict the tasks that may be assigned. Origin Bank shall, in its discretion, modify or adjust the position to meet the Bank’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in the Bank’s sole discretion.

We know how to fine-tune corporate security because we've led effective and efficient Fortune 500-level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.