Steve Huff
VP, IT Security & Risk @Capitol Federal® Savings Bank
Signup · Get unlimited contacts
WORK HISTORY
VP, IT Security & Risk @Capitol Federal® Savings Bank
Topeka, KS, US
As an accomplished cybersecurity professional, I specialize in creating information security governance programs by collaborating with business partners to design controls that safeguard the bank’s confidential information. My strategic approach combines technical expertise, banking acumen, and regulatory knowledge, resulting in robust, multi-layered defenses against cyber threats.Through my team we implement and oversee cybersecurity controls across the entire bank. Our approach is risk-based, both in working with frameworks such as CIS and NIST, and addressing findings from risk assessments, penetration tests, audits, and examinations. As the primary IT regulator liaison, I ensure seamless compliance. Additionally, my expertise extends to interpreting regulatory changes (e.g, FFIEC) and making necessary adjustments to our IT SOX controls.I play a crucial role in keeping our Board informed about our cybersecurity posture. By bridging the gap between technical intricacies and business impacts, my briefings empower informed decision-making at the highest level.Drawing on my background in business law and regulatory requirements, I effectively negotiate technology agreements. I overhauled the vendor management program to ensure regulatory compliance, creating new processes for vendor onboarding and due diligence. I am also responsible for the bank\'s cyber incident response.
EDUCATION
Graduate School of Banking at the University of Wisconsin - Madison
Bank Technology Management
The University of Kansas
MBA, Information Technology
The George Washington University
Master's Certificate, IT Project Management
The University of Kansas
BS, Business and Accounting
SKILLS
ABOUT STEVE HUFF
With over 20 years of work experience in the IT and banking sectors, I am a seasoned and certified IT security leader who is passionate about protecting data and systems from cyber threats. I have a strong background in IT security strategy, operations, frameworks, and compliance, as well as project management and vendor negotiation skills. As the VP of IT Security & Risk at Capitol Federal Savings Bank, I am responsible for establishing and leading the IT security function, providing periodic updates to the Board, and managing relationships with third parties for security telemetry and threat feeds.In my current role, I have successfully implemented several initiatives to enhance the security posture of the bank, such as expanding the responsibilities of the security team to improve risk mitigation, implementing multi-factor authentication, and evaluating and deploying SIEM and log collection systems. I leverage various security frameworks, such as CIS Critical Security Controls, NIST, and FFIEC, to guide security strategy and operations. I also hold multiple certifications, such as CISM, GSLC, and that demonstrate my knowledge and expertise in IT security and risk management.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.