Director of Information Security Operations

At First Mid, base salary is one component of our Total Rewards program. Exact compensation is determined by factors such as (but not limited to) education, skills, internal equity, and experience. This position offers additional compensation in the form of discretionary short-term incentives (i.e. bonus, incentives, and/or commission). Benefits for this role include comprehensive healthcare, well-being benefits, paid family leave as well as generous paid time off. Total Rewards also include banking perks, tuition reimbursement, an Employee Stock Purchase Plan, and a 401K plan with company match. Incentives and benefits are subject to eligibility requirements. The Director of Information Security Operations is responsible for leading and advancing the organization’s enterprise information security program to protect First Mid Bank & Trust and its subsidiaries from evolving cyber and information security risks. This position requires a highly ethical, analytical, and strategic leader capable of managing multiple priorities in a complex, regulated environment.The role provides leadership and oversight of the internal Security Operations Center (SOC), third-party information security service providers, and plays large roles within information security audit and assessment activities. The Director of Information Security Operations is responsible for strengthening the organization’s security posture, enhancing threat detection and incident response capabilities, supporting regulatory and compliance requirements, and ensuring information security risks are identified, assessed, communicated, and appropriately managed across the enterprise.Responsibilities include, but are not limited to:Lead and Manage the Information Security Team FunctionOwn and Execute the Information Security StrategyOversee Enterprise Security Technologies and SolutionsEstablish and Enhance Security Processes and ControlsManage and triage First Mid Security Issues and IncidentsLead/Manage/Assist First Mid-Information Security/Organizational ProjectsFirst Line of Defense Testing/Threat HuntingStrengthen Enterprise Cyber ResiliencePartner Across the EnterpriseManage and assist with internal pen testing and internal systems auditing.Manage Infosec Policies and KRI’sOn-call rotation responsibilitiesQualificationsEducation/Experience:Previous Information Security or IT Leadership Experience within Financial Services Preferred8+ years Information Security experience or related IT experienceBachelor’s degree in computer science or related field work experience/continuous educationAdvanced Security Certifications – ex. CISSP, CEH, CCSP, CASP+ is a plus and/or obtaining certifications within 18 months of employment.Proven security competencies around all sectors of Cyber SecuritySkills:Interpersonal skills, both written and verbal, that will allow good communication to a diverse range of individuals with various levels of computer skills.Report Writing,Verbal Communication. The ability to Analyze data via its trends and patterns and communicate with stakeholdersProblem solving skillsStrong technical skills.Familiarity with bankingExperience with the OSI Model, network concepts, operating systems and endpoint-based operating system.Adequate knowledge of both internal policies and procedures and the respective state and federal laws and regulations governing departmental functions to ensure performance of individual job duties within the proper control environment.Total Rewards:Competitive health, dental & vision coverage with HSA match401(k) with employer match + Employee Stock Purchase PlanGenerous PTO, paid holidays & parental leaveTuition reimbursement & performance-based bonusesVisit our Total Rewards page to see our full list of benefitsFirst Mid Bancshares, Inc. is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, gender identity, sexual orientation, protected veteran status, or any other applicable federal or state-protected classification.THIS JOB DESCRIPTION DOES NOT CONSTITUTE A CONTRACT FOR EMPLOYMENT