How will this role impact First Command?

Reporting to the Director, Information Security & Data Privacy, this role is responsible for leading the execution, and continuous improvement of Information Security Operations across First Command Financial Services. The Associate Director will oversee day-to-day operational security capabilities that protect the organization, support regulatory and audit expectations, and improve the effectiveness of security controls. This role partners closely with IT leadership, Infrastructure, Risk, Legal, Compliance, and business stakeholders to ensure security operations are reliable, measurable, and aligned to enterprise priorities. Key areas of focus include, operational control execution, reporting, audit response, process maturity, and team leadership.

What will the employee do in this role?

• Lead and mature the Information Security Operations function, including execution, reporting, and continuous improvement.
• Oversee daily security operations activities, including monitoring, triage coordination, escalation processes, control execution, and operational readiness.
• Partner with Infrastructure, Risk, Legal, Compliance, and business teams to ensure security controls are implemented, operating effectively, and aligned to enterprise risk priorities.
• Coordinate vulnerability management, threat response, incident readiness, remediation tracking, and operational follow-up across technology and business teams.
• Develop and ensure the consistent maintenance of operational procedures, playbooks, process documentation, metrics, dashboards, and leadership reporting for security operations.
• Support audit, regulatory, and risk management activities by providing evidence, control narratives, remediation status, and operational reporting.
• Drive operational improvements that reduce risk, increase response effectiveness, strengthen accountability, and improve visibility into security posture.
• Manage security operations priorities, resource needs, project dependencies, and production support demands without jeopardizing critical operational work.
• Collaborate with project managers and technology leaders to align security operations requirements with enterprise initiatives and implementation timelines.
• Supervise employees in the area of responsibility, provide daily work direction and project assignments, and monitor progress against scheduled tasks.
• Measure team and program effectiveness through agreed-upon operational metrics, service levels, risk indicators, and control performance measures.

Who will this employee lead? 

This role manages members of the Information Security team responsible for executing and supporting day-to-day security operations, control activities, incident readiness, vulnerability coordination, and operational reporting. The Associate Director provides work direction, coaching, prioritization, performance feedback, and accountability to ensure the team delivers reliable, timely, and risk-aligned security outcomes.

What skills and qualifications does this employee need?

Education

• Bachelor’s degree preferred

Work Experience

• 5+ years of relevant work experience in information security operations, cybersecurity, technology risk, infrastructure security, or related IT functions.
• Experience leading operational security capabilities such as security monitoring, vulnerability management, incident response coordination, threat management, access/security control operations, or security tooling support.
• Experience supporting audit, regulatory, compliance, or risk management activities in a financial services, banking, or similarly regulated environment.
• Experience in project, program, or operational management, including prioritization, resource coordination, reporting, and stakeholder communication.
• A minimum of 3 years’ leadership experience managing teams, vendors, operational processes, or cross-functional security initiatives.

Certifications 

• Information security, cybersecurity, risk, or technology certification preferred, such as CISSP, CISM, CISA, CRISC, Security+, GIAC, or equivalent experience.

Required Knowledge, Skills and Abilities

• Strong understanding of information security operations, security controls, incident response processes, vulnerability management, threat management, and operational risk reduction.
• Ability to translate technical security issues into business risks, priorities, action plans, and executive-level updates.
• Experience developing and maintaining operating procedures, playbooks, evidence packages, metrics, dashboards, and status reporting.
• Demonstrated ability to coordinate across technical teams, business stakeholders, vendors, audit, compliance, and risk partners to drive timely outcomes.
• Strong analytical, problem-solving, prioritization, and decision-making skills in a timeline-driven operational environment.
• Passion for well-organized documentation, repeatable processes, measurable controls, and operational accountability.
• Ability to manage multiple operational and project priorities, including staffing considerations, planning, resource allocation, timelines, and production support demands.
• Excellent communication skills for setting expectations, clarifying assignments, escalating risks, and keeping team members and stakeholders focused on priorities.
• Demonstrated ability to manage, coach, and develop a highly technical and diverse team while fostering collaboration, accountability, and continuous growth.

LI-NC1

LI-Hybrid

©2026
First Command Financial Services, Inc. parent of First Command Brokerage
Services, Inc. (Member SIPC, FINRA), First Command Advisory Services,
Inc., First Command Insurance Services, Inc. and First Command Bank. Securities
products and brokerage services are provided by First Command Brokerage
Services, Inc., a broker-dealer. Financial planning and investment advisory services are
provided by First Command Advisory Services, Inc., an investment adviser.
Insurance products and services are provided by First Command Insurance
Services, Inc. Banking products and services are provided by First Command Bank
(Member FDIC).
Investment and insurance products are not deposits, are not insured by the
FDIC, and may lose value. A financial plan, by itself, cannot assure that
retirement or other financial goals will be met.

First Command does not discriminate in the recruiting of Financial Advisors on
the basis of race, color, religion, national origin, sex, marital status,
disability, age or veteran status. No information solicited by First Command
from you is intended to be used in a discriminatory manner. All information
provided by you will be reviewed carefully, but the receipt of an Advisor
application or other information does not imply that you will be offered the
opportunity to enter into a Financial Advisor/Agent Agreement with First
Command.