Icba Payments-Information Security Engineer

The Independent Community Bankers of America® is the nation's voice for community banks. Join our team to be part our mission to create and promote an environment where community banks flourish.

Our organization values innovation, diversity, entrepreneurial spirits, and people who are passionate about serving our nation's community banks. We are consistently ranked a top advocacy organization in Washington, DC, and offer our team competitive benefits, compensation, and work-life balance. Summary ICBA Payments is a leading provider of payment solutions to community banks, serving more than 1,300 financial institutions.

The Information Security Engineer is a detail oriented and reliable specialist who will primarily focus on managing and optimizing the company's cybersecurity platforms, ensuring the security and integrity of sensitive payment transactions for community banks. This role includes working with both internal and external partners to strengthen the security of payment services. The ideal candidate must possess experience with threat detection and prevention strategies, strong background in information/data security, PCI-DSS and SOC I/II hardware and security requirements, and familiarity with payment systems.

This is a hybrid position. The candidate can work from ICBA's Washington, DC; Atlanta, GA; or Sauk Centre, MN location. Responsibilities Cybersecurity & Incident Response:

Monitor alerts from IDS, firewalls, and SIEM systems. Investigate and document security incidents, collaborating with internal teams as needed. Support incident response for clients and end-users.

Security Operations: Conduct vulnerability assessments, manage patches, and prioritize risks. Oversee platform security, including firewalls, IDS/IPS, and endpoint solutions.

Support compliance with regulatory standards (ex. PCI-DSS, SOC I/II, etc.) Risk & Compliance: Conduct internal and third-party audits, ensuring compliance with PCI-DSS.

Document compliance and prepare for external audits. Policy & Awareness: Develop security policies and training programs for employees.

Lead phishing simulations and create resources to promote security best practices. Qualifications: Education: Bachelor's degree in IT, Cybersecurity, Computer Science, or related field. Degree or certification and scope of professional experience will be considered.

Certifications: CISSP, CISM, CISA, or similar preferred. Experience: At a minimum of 5 years in information security, ideally in the banking/payments industry. Skills: Proficiency with SIEM, IDS/IPS, and endpoint security.

Familiarity with PCI-DSS and SOC I/II Ability to analyze complex security threats and translate findings into actionable recommendations. Prior experience in card management, strategic planning, and project management. Create and maintain operational procedures.

Regularly monitor processes for effectiveness and communicate with management regarding procedural changes for efficiency and effectiveness. Assist ICBA Payments' leadership with various tasks, assignments, and projects as needed. Strong analytical and communication skills for explaining technical issues to non-technical audiences.

Strong customer service orientation and attention to detail. Perform other duties as assigned. Compensation and Benefits The target annual salary range for this role is currently $95,000 to $100,000 based on a regular, full-time schedule.

The amount of compensation offered will be determined by several factors, including but not limited to experience, qualifications, market data and internal equity. Total compensation includes a comprehensive healthcare benefits package (medical, dental and vision), 401k plan company match contribution, and an annual performance bonus. Equal Employment Opportunity ICBA is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. ICBA does not discriminate on the basis of race, ethnicity, religion, sex, color, national origin, age, sexual orientation, gender identity or expression, mental or physical disability, genetic information, veteran status, or on any other basis prohibited by applicable law.