Remote New

Director, Cyber Assurance and Trust

Jack Henry & Associates, Inc.
United States
Nov 04, 2025
Description & Requirements At Jack Henry, we're more than a technology company; we're a force for good in financial services. We're redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people-inspired innovation, empowering financial institutions to deliver seamless, secure, and human-centered experiences. We deliver cutting-edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates. If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence, then we'd love to meet you. We are seeking a Director of Cyber Assurance and Trust to help grow our operations and take vital next steps in ensuring the security and compliance posture of our enterprise. This role will be tasked with the oversight of our governance, risk, and compliance (GRC) protocols, security awareness initiatives, and third party risk management. This individual will lead a high performing group, with a mix of direct reports including both individual contributors and managers. The ideal candidate is an experienced change agent with a mix of technical and business knowledge and an ability to inspire others to do new, big, exciting things. Strong communication skills and a collaborative attitude are essential. This position can be based to work out of any Jack Henry office or remotely from any US location, with the exception of California. All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity. If you are interested, please apply on or before Wednesday, November 12, 2025. What you'll be responsible for: Develops and maintains cybersecurity policies, standards, and procedures aligned with industry frameworks (e.g., NIST, ISO 27001, PCI DSS, SOC 2, GDPR EDIT) and internal. Leads compliance audits and ensures consistent policy application across departments. Oversees documentation review, approval, and maintenance for all cybersecurity policies, standards, incident reports, audit finding, and dashboards. Owns the enterprise cyber risk register, leading risks identification, assessment, quantification, and tracking through mitigation. Evaluates cybersecurity controls via regular assessments, penetration testing, and incident response reviews; drives continuous improvement of internal controls. Collaborates with internal audit, legal, and compliance teams to align with regulatory requirements and business continuity planning. Monitors and reports on cyber compliance metrics, including SLA adherence and vulnerability thresholds. Conducts vendor and partner security assessments, ensures contracts include enforceable security clauses and audit rights, and manages ongoing monitoring of high-risk third parties. Leads enterprise-wide security awareness initiatives, including phishing simulations and targeted training: promotes a cybersecurity culture across business units. Presents risk and compliance updates to executive leadership and the board. Perform other duties as assigned. What you'll need to have: A minimum of 12 years of experience in cybersecurity governance, risk management, and compliance. A minimum of 5 years of leadership within large-scale IT organizations. Experience with the following: third party risk management, data loss prevention, security and compliance frameworks (e.g. NIST, ISO 2700, SOC 2), cybersecurity awareness programs. Bachelor's degree. Ability to travel up to 20% for business meetings and conferences. What would be nice for you to have: Experience leading cybersecurity audits. CISSP certification. Master's degree. If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're eager to meet motivated people who align with Jack Henry's mission and can contribute to our company in a variety of ways. Why Jack Henry? At Jack Henry, we pride ourselves through our motto of, "Do the right thing, do whatever it takes, and have fun." We recognize the value of our associates and believe much of our company's strength and success depends on their well-being. We demonstrate our commitment by offering outstanding benefit programs to ensure the physical, mental & financial well-being of our people is always met. Culture of Commitment Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders. Equal Employment Opportunity At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law. No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations. Requests for full corporate job descriptions may be requested through the interview process at any time.