Demonstrated command of the NIST Cybersecurity Framework, FFIEC IT Examination Handbook guidance, CIS Controls, and banking regulatory expectations; working knowledge of ISO 27001 and SOC 2. Practical technical depth in cloud and hybrid architecture, network and endpoint security, identity and access management, encryption, data protection, application security, and secure software development. Own, maintain, and regularly test the company's Computer Security Incident Response Plan through tabletop exercises and simulations; serve as executive incident commander for material events and coordinate containment, recovery, communications, regulatory notifications, and post-incident reviews with Legal, Compliance, Fraud, Risk, and business leaders.