VP, Cybersecurity

Company Description

Ent Credit Union and Wings Credit Union joined forces in January 2026. This merger means more opportunities, expanded resources, and a shared commitment to delivering exceptional member service. Together, we become more - empowering members, communities, and teams through a bold, unified future. Both organizations bring a strong legacy of member satisfaction, operational excellence, financial stability, and community impact. Recognized locally and nationally as best-in-class financial institutions and employers of choice, each is known for its commitment to financial well-being and philanthropic leadership. Join us during this transformative time and be part of shaping the future of banking! To learn more about the merger, click here.

Job Description

The Vice President of Cyber Operations serves as the enterprise leader responsible for cybersecurity operations, cyber incident response, cyber resilience, application security, business continuity, disaster recovery, and operational security execution across a merged and rapidly scaling financial institution. This role establishes a unified cyber command structure that aligns people, processes, technologies, applications, platforms, and third-party partners to deliver proactive defense, secure delivery, rapid response, resilient recovery, and strong regulatory execution. 

Essential Functions

• Cybersecurity Operations and SOC Leadership:
  • Lead and mature the enterprise Security Operations Center, including 24/7 threat monitoring, detection, triage, escalation, and response.
  • Oversee the Security Information and Event Management platform and related detection technologies.
  • Integrate SIEM, EDR, threat intelligence, alerting, and response capabilities across enterprise environments.
  • Establish and track key operational metrics, including MTTD, MTTR, alert fidelity, incident trends, and response effectiveness.
• Cybersecurity Incident Response and Crisis Leadership:
  • Own the enterprise cyber incident response program, strategy and capability.
  • Lead executive-level cyber crisis response across IT, Legal, Risk, Compliance, Communications, Operations, and senior leadership.
  • Develop, maintain, and test cybersecurity playbooks and response procedures.
  • Ensure incident response plans are integrated with business continuity, disaster recovery, crisis communications, and operational recovery procedures.
• Business Continuity, Disaster Recovery, and Operational Resilience:
  • Lead and own the enterprise Business Continuity and Disaster Recovery functions and strategy, ensuring the organization can maintain or restore critical business services during disruptive events.
  • Partner with business leaders to validate critical processes, recovery strategies, manual workarounds, communication plans, staffing models, and member-impact considerations.
  • Provide executive reporting on continuity readiness, recovery capability, testing outcomes, residual risk, and enterprise resilience posture.
• Application Security and Secure Delivery:
  • Lead operational execution of application security practices in partnership with engineering, product, technology delivery, and enterprise security stakeholders.
  • Drive DevSecOps alignment, automation, and scalable security practices.
  • Partner with application and platform owners to ensure critical applications have appropriate recovery plans, backup strategies, vulnerability remediation practices, and cyber resilience controls.
• Backup, Cyber Recovery, and Ransomware Resilience:
  • Own the enterprise backup and cyber recovery strategy in partnership with technology, infrastructure, business continuity, and enterprise security stakeholders.
  • Ensure backup architecture, retention, immutability, restoration procedures, and recovery capabilities support ransomware resilience and business recovery needs.
  • Oversee periodic restoration testing and cyber recovery exercises for critical systems and data. 
• Security Architecture and Design Review Support:
  • Participate in the Architectural Review Board as the cyber operations, recovery, and resilience voice.
  • Collaborate with technology, engineering, infrastructure, cloud, data, and business teams to ensure operational security and recovery considerations are embedded into enterprise technology decisions.
  • Champion the adoption of Zero Trust, identity-first security, secure-by-design, and resilient-by-design principles in alignment with enterprise security policy and architecture direction.
• Security Policy Adherence and Operational Controls:
  • Ensure cybersecurity operations and resilience functions adhere to established enterprise se