Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 90 days ago

Director, Information Security

First Entertainment Credit Union6 open roles

Pay
$130,000 – $170,000 a year
Where
Hollywood, CA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector, Information SecurityFirst Entertainment Credit Union · Hollywood, CA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on First Entertainment Credit Union's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. First Entertainment Credit Union postings stay open a median of 41 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 90 days ago

First Entertainment Credit Union median: 41 days open

The posting

First Entertainment Credit Union is looking for a Director, Information Security who is responsible for leading the organization’s information security program to protect information assets, technology infrastructure, and customer data. This role develops security strategy, oversees cybersecurity operations, governance, risk, and compliance (GRC), ensures regulatory compliance, manages security risks, and partners across the organization to strengthen the overall security posture.

The Director will serve as a trusted advisor on cybersecurity strategy, emerging threats, risk exposure, and security investments. They will provide advice on security architecture, technology implementations, cloud adoption, and security requirements for new systems and initiatives. The role maintains and enhances cyber resilience through partnership with the enterprise business, oversight of cyber recovery security requirements, coordination with IT on disaster recovery, cyber incident response planning, ransomware preparedness exercises, tabletop testing, and recovery readiness; IT retains ownership of technical disaster recovery execution.

This is a full-time hybrid in Hollywood, CA and reports to the VP, Enterprise Risk Management. For candidates in California, the targeted pay range is between $150,000 to $190,000.

Responsibilities

  • Develop, execute, and continuously mature the enterprise Information Security Program, including security strategy, governance frameworks, policies, standards, procedures, roadmaps, and annual planning initiatives.
  • Establish and maintain security governance practices aligned with organizational objectives and provide risk insights and strategic recommendations to executive leadership and the Board.
  • Provide GRC oversight and challenge of IT and the Information Security Program, including security requirements, control assessments, risk and remediation reviews, policy exceptions, and escalation of material security risks, while maintaining appropriate separation from Internal Audit assurance.
  • Oversee security operations, including security monitoring, incident detection and response, SOC coordination, forensic investigations, remediation, and escalation of unresolved security risks.
  • Oversee identity and access management (IAM) security requirements, including least-privilege access, privileged access management, user access certifications, and segregation of duties compliance.
  • Manage vulnerability and threat management programs, including vulnerability assessments, penetration testing, threat intelligence, remediation prioritization, patch management oversight, and ongoing risk monitoring.
  • Oversee information security risk throughout the third-party vendor lifecycle, including security due diligence, risk assessments, control reviews, ongoing monitoring, remediation, and escalation of material security risks in partnership with Enterprise Risk Management, IT, vendor management, and business owners.
  • Ensure compliance with applicable cybersecurity laws, regulations, frameworks, and industry standards, including but not limited to NCUA, FFIEC, GLBA, PCI DSS, NIST, CIS Controls.
  • Manage cybersecurity audit and examination readiness, including regulatory requests, evidence collection, control assessments, corrective actions, policy exceptions, risk acceptance, and remediation tracking.
  • Manage cyber resilience and recovery readiness, including cyber incident response planning, ransomware preparedness, tabletop exercises, recovery assessments, and coordination with business continuity and IT.
  • Develop and promote enterprise security awareness and education programs, including phishing simulations, executive cybersecurity education, and initiatives that foster a security-first culture.
  • Develop and maintain cybersecurity KRIs, KPIs, dashboards, and reporting processes, and administer and optimize GRC platforms and tools.

At First Entertainment, your role, and every role, is essential to fulfilling our Mission, “We build lifelong relationships with the people of the entertainment and creative industries based on a deep understanding of how they live and work,” and living our Core Values: Members First, Ownership, Integrity, Innovation, Inclusivity, and One Team. We expect all teammates to uphold these principles in everything they do.

Requirements

  • Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, or a related field. A Master's degree preferred but not required.
  • 10+ years of progressive information security, cybersecurity, risk management, or IT governance experience, including 5+ years in a leadership or people management role.
  • Strong knowledge of cybersecurity frameworks, standards, and regulations, including NIST Cybersecurity Framework, NIST 800-53, FFIEC guidance, GLBA, CIS Controls, ISO 27001, and applicable financial services regulatory requirements.
  • Professional certifications such as CISSP, CISM, CRISC, CISA, CGEIT, CCSP, or equivalent preferred but not required.
  • Prior experience within the banking, credit union, financial services, fintech, or other highly regulated industries preferred but not required.
  • Experience conducting enterprise cyber risk assessments, maintaining risk registers, developing risk treatment plans, and integrating cyber risk into enterprise risk management programs.
  • Demonstrated experience applying GRC oversight and effective challenge to IT risk assessments, control design and effectiveness, and remediation plans, while maintaining clear boundaries between operational ownership, risk oversight, and independent assurance.
  • Proficiency in security operations, vulnerability management, threat intelligence, penetration testing, and third-party cybersecurity risk management programs.
  • Experience overseeing third- and fourth-party security risk throughout the vendor lifecycle, including evaluation of vendor assurance reports, material subcontractor dependencies, contractual security provisions, remediation, and residual risk.
  • Strong understanding of identity and access management, privileged access controls, segregation of duties, and security governance best practices.
  • Experience reviewing technology implementations, cloud environments, network architectures, and system designs to identify and mitigate security risks.
  • Knowledge of data protection and security-by-design practices, including data classification, encryption, data loss prevention, secure development, and security reviews for new technology and material changes.
  • Experience supporting business continuity, disaster recovery, cyber resilience planning, tabletop exercises, and ransomware preparedness activities.
  • Experience in incident governance and escalation, including coordination of material cyber incidents with IT, Legal, Compliance, ERM, and business leadership, notification assessments, and post-incident lessons learned.
  • Exceptional written, verbal, and presentation skills, with the ability to effectively communicate across all audience levels and translate technical exposures into business impacts, risk treatment options, investment priorities, and decisions requiring escalation to executive leadership and the Board.
  • Experience developing security roadmaps, managing program budgets and service providers, and prioritizing security investments and resources based on risk.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against First Entertainment Credit Union's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on First Entertainment Credit Union's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    First Entertainment Credit Union's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.