Executive Director, Information Risk

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.  

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long-lasting relationships. 

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO). 

Headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano and San Antonio, Texas Capital was recently named Best Regional Bank in 2024 by Bankrate and was named to The Dallas Morning News’ Dallas-Fort Worth metroplex Top Workplaces 2023 and GoBankingRate’s 2023 list of Best Regional Banks. For more information about joining our team, please visit us at www.texascapitalbank.com. 

Brief Overview of Position

Information risk management plays a critical role in ensuring that the company’s risk-taking entities are aware of the risks inherent in their activities and decisions, the impact of their actions on the company at an enterprise level, and opportunities to reduce, mitigate, or avoid the risks altogether. Information Risk owns the information security policies and manages the overall information security program, which includes risk identification, risk measurement, risk mitigation and risk monitoring & reporting. The purpose of the group is to direct and independently govern and report measurable information risk across the firm while providing effective challenge to first line execution of the program. Information Risk is closely aligned with Compliance and Operational Risk, reporting key risk indicators and program status to the CRO, CEO, Board of Directors, Operational Risk Committee and Enterprise Risk Committee.

The Executive Director, Information Risk reports to the Chief Security Risk Officer and engages with management in the lines of business to understand new initiatives, provide information on the inherent information risk of these activities, and outline ways to mitigate the risks.

Responsibilities

• Experience and knowledgeable with financial institution regulatory information security standards (GLBA), guidance (i.e. FFIEC IT Handbooks, FILs), and industry frameworks (i.e. NIST, CAT, PCI) for the size and complexity of the bank’s operations.
• Knowledge and skills in vulnerability, configuration, and systems that TCB installs and operates. 
• Responsible for effectively overseeing and continuing to develop an information security program satisfying the Interagency Guidelines Establishing Information Security Standards (GLBA).
• A champion of internal and external security who oversees and reports on the management and mitigation of information security risks across the institution and is held accountable for the results of this oversight and reporting.
• Empowered and unhindered direct access to the board or a board committee, with reporting at every meeting.
• Be a business – IT / IS translator.  Must be able to communicate to management and the board, in plain English, on how the business could be affected by various threats and advise on possible solutions.    
• Must be able to “Break through” layers of management if there is a problem.
• An educator on information security and cybersecurity to the various stakeholders throughout the organization.
• An effective reporting structure to report directly to the CRO. The reporting structure should demonstrate that the position has the appropriate authority to carry out the responsibilities of that posi