{"id":3776985,"url":"https://alion.io/job/cornerstone-home-lending-director-integrated-security","title":"Director, Integrated Security","company":{"id":2781540,"name":"Cornerstone Home Lending","domain":"houseloan.com","url":"https://alion.io/company/houseloan","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States","Englewood, United States","Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Office","optional":false},{"name":"NIST CSF","optional":false},{"name":"Outlook","optional":false}],"status":"live","first_seen_at":"2026-11-03T16:15:08Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-10T08:07:18Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Cornerstone Capital Bancorp, Inc., headquartered in Houston, is a Texas-based financial services company dedicated to helping families, businesses, and communities thrive. Through its primary subsidiary, Cornerstone Capital Bank, the organization operates a community and business banking franchise alongside a premier national home lending, servicing, and home insurance platform-based financial services company dedicated to helping families, businesses, and communities thrive.\nGuided by a core Mission, Vision and Convictions statement, Cornerstone operates 17 full-service banking locations across major Texas markets and more than 150 mortgage offices nationwide. The company has served nearly 700,000 customers through its family of brands, including Cornerstone Home Lending, Roscoe Bank, Peoples Bank, Cornerstone Servicing, and Cornerstone Insurance. Supported by 1,600 team members, Cornerstone is consistently recognized as a Fortune-certified Great Place to Work® and a Top Workplace.\nFormed through the combination of Cornerstone Home Lending and The Roscoe State Bank, Cornerstone brings more than a century of experience and is the highest-capitalized new bank in Texas history.\nWe honor God by using our talents to make a positive difference in the lives of our Team Members, Clients, Shareholders, Communities, and the People who provide services to us.\nWho we are looking for:\nThe Director, Integrated Security serves as the Bank’s second line of defense (2LOD) leader for security risk, providing independent oversight, credible challenge, and assurance over the first line’s management of information security, IT, privacy, and corporate security risks. This role does not own or operate security controls; rather, it sets the enterprise security risk framework, defines risk appetite and policy standards, evaluates the design and operating effectiveness of first-line programs, and reports an independent view of the Bank’s security risk posture to executive management, the Risk Committee, and the Board. Areas of oversight include Enterprise Security Governance and the Bank’s policies, frameworks, and risk standards for Information Security, IT Risk Management, Privacy, and Corporate Security. The Director maintains functional independence from first-line operational security teams to preserve the integrity of the challenge function.\nWhat you’ll do:\nSecurity Risk Framework and Policy:\nEstablish and maintain the enterprise security risk management framework, including risk appetite statements, policies, minimum control standards, and risk taxonomies that the first line is required to implement.\nReview and challenge first-line policies, standards, and procedures to confirm alignment with regulatory expectations, the Bank’s risk appetite, and industry frameworks (e.g., NIST CSF, FFIEC CAT, ISO 27001).\nIndependent Risk Assessment and Challenge:\nPerform independent assessments of the first line’s identification, measurement, and management of security risks, including review of risk and control self-assessments (RCSAs), issue management, and key risk indicators.\nProvide credible challenge to first-line risk treatment decisions, exception requests, and risk acceptances; escalate unresolved concerns through governance committees to executive management and the Board.\nRegulatory and Compliance Oversight:\nMonitor and independently assess first-line compliance with applicable laws, regulations, and supervisory expectations (e.g., GLBA, FFIEC IT Handbook, NYDFS Part 500, SEC cybersecurity disclosure rules, state privacy laws); track remediation of regulatory findings and matters requiring attention (MRAs).\nPartner with the Chief Privacy Officer to provide oversight and challenge of the first line’s implementation of GLBA’s privacy provisions and other consumer data protection requirements.\nIncident Oversight:\nEstablish minimum standards for the first line’s incident response, business resilience, and cyber recovery programs; review and challenge the design, testing, and continuous improvement of those programs.\nServe in an advisory and oversight capacity during material security incidents; perform independent post-incident reviews of first-line response effectiveness and root-cause remediation, and report findings to executive management and the Board.\nSecurity Culture and Awareness Oversight:\nEstablish enterprise expectations for the first line’s security awareness and role-based training programs, and independently assess their effectiveness through metrics, phishing test results, and behavioral indicators.\nMonitor and report on the enterprise security risk culture; identify gaps and recommend improvements to executive management and the Board.\nTechnology and Control Oversight:\nSet control objectives and minimum technical standards for security architecture and tooling; review and challenge first-line technology selection, design, and deployment decisions for alignment with risk appetite.\nIndependently test and validate the design and operating effectiveness of key security controls operated by the first line; document findings and track remediation through closure.\nThree Lines of Defense Coordination:\nCoordinate with first-line technology and business owners, Enterprise Risk Management, Compliance, Legal, and Internal Audit (3LOD) to ensure clear roles, avoid duplication, and maintain the independence of the second-line challenge function.\nEngage with business and technology leaders to understand strategic initiatives, provide advisory input on emerging security risks, and assess whether first-line risk management is commensurate with the risks taken.\nIndependent Reporting and Governance:\nProduce independent reporting on the Bank’s security risk posture, control effectiveness, key risk indicators, and emerging threats for executive management, the Risk Committee, and the Board, with an unfiltered reporting line that does not require first-line approval.\nReview first-line security metrics, key risk indicators (KRIs), and breach/event trends to form an independent view of risk position relative to appetite.\nBusiness Continuity Ownership:\nDevelop and maintain business continuity and resiliency plans.\nConduct business impact analyses and continuity risk assessments.\nCoordinate continuity testing, exercises, and corrective actions.\nMaintain business continuity governance, reporting, and documentation.\nLead crisis response and recovery coordination during disruptions.\nPartner with business units and vendors to strengthen operational resilience.\nMonitor compliance with continuity policies and regulatory expectations.\nDeliver business continuity training and awareness programs.\nReport continuity risks and program performance to management.\nAlign business continuity, disaster recovery, and incident management activities.\nProvide oversight of the Bank Protection Officer function and the Bank’s compliance with the Bank Protection Act and 12 CFR Part 21\nDeliver an independent Annual Security Risk Report to the Board, including an assessment of the adequacy of the first line’s security program and outstanding risk issues\nAdvise on security awareness and training curriculum\nProvide a second line of defense governance perspective on enterprise security and resilience initiatives, ensuring risk considerations are incorporated from inception\nOther duties as assigned\nWhat you’ll need to be successful:\nSuccessin this job relies on your time management skills, organization, and positive attitude.In addition, you’ll need the following qualifications:\nMinimum of 10 years of experience in information security, technology risk, or operational risk management within the Financial Services sector, with at least 5 years in a second line of defense, risk oversight, or audit capacity\nMinimum of 5 years of mid- to large-bank experience, including direct interaction with regulators (OCC, FRB, FDIC, NYDFS, or state banking departments) and the Board or its Risk Committee\nBachelor’s Degree preferred\nExpert knowledge of three-lines-of-defense risk governance, enterprise risk management frameworks, regulatory expectations (FFIEC IT Handbook, NIST CSF, NYDFS Part 500, GLBA, SR Letters), and the principles of independent challenge and effective challenge.\nStrong analytical reasoning, problem-solving, and critical thinking skills\nStrong computer and organizational skills\nStrong oral and written presentation skills\nAbility to work independently with a multi-level team\nAbility to multitask and meet deadlines\nStrong proficiency with Microsoft Office (Word, Excel, Outlook, etc.);\n\nPreferred Certifications:\nCurrent Certified Information Systems Security Professional (CISSP)\nCurrent Certified in Risk and Information Systems Control (CRISC)\nCertified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or equivalent risk/audit certification preferred\n\nWhat we offer:\nBecause we recognize and reward hard work, we offer a competitive salary, Medical, Dental, Vision, Accidental Death, Long-Term Disability, Short-Term Disability, FSA, HSA, 401K, Basic Life, Voluntary Life, and Paid Parental Leave benefits, as well as the opportunity for a performance-based bonus based on position and department.\nWhat to do next: If Cornerstone sounds like the place for you (and if you have the qualifications, drive, and passion to match), we invite you to become a member of our winning team! And remember, once you're part of our Cornerstone family, we'll continue to invest in you as a valuable asset in our company. As many of our team members can tell you, there's something special about working at Cornerstone.","description_format":"text","description_chars":9640,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["401k plan","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Real Estate","Residential Real Estate"],"lifecycle":[{"event":"open","at":"2026-11-04T23:35:54Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":30,"reasons":["conf:4","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/cornerstone-home-lending-director-integrated-security","json_url":"https://alion.io/job/cornerstone-home-lending-director-integrated-security.json","meta":{"generated_at":"2026-11-10T11:08:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25820,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2781540},"rest":"https://alion.io/mcp/rest/get_company?id=2781540"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcornerstone-home-lending-director-integrated-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcornerstone-home-lending-director-integrated-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcornerstone-home-lending-director-integrated-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cornerstone-home-lending-director-integrated-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcornerstone-home-lending-director-integrated-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3776985}},{"tool":"search_jobs","arguments":{"company":"houseloan.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3776985},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}