Third Party Security Lead

Third Party Security Lead Job Locations US-OH Category/Function Risk/Security Position Type Regular Full-Time Requisition ID 2026-20413 Workplace Type On Site Overview Old National Bank has been serving clients and communities since 1834. With over $70 billion in total assets, we are a regional powerhouse deeply rooted in the communities we serve. As a trusted partner, we thrive on helping our clients achieve their goals and dreams, and we are committed to social responsibility and investing in our communities through volunteering and charitable giving. We continually seek highly motivated and talented individuals as our people are critical to our success. In return, we offer competitive compensation with our salary and incentive program, in addition to medical, dental, and vision insurance. 401K, continuing education opportunities and an employee assistance program are also included in our benefit suite. Old National also offers a variety of Impact Network Groups led by team members who are passionate about driving engagement, creating awareness of diverse backgrounds and experiences, and building inclusion across the organization. We offer a unique opportunity to join a growing, community and client-focused company that is firmly rooted in its core values. Responsibilities Salary Range The salary range for this position is $81,700/yr - $165,100/yr plus bonus. The base salary indicated for this position reflects the compensation range applicable to all levels of the role across the United States. Actual salary offers within this range may vary based on a number of factors, including the specific responsibilities of the position, the candidate's relevant skills and professional experience, educational qualifications, and geographic location. The ThirdParty Security Lead is responsible for the design, execution, and continuous improvement of ONB's thirdparty cybersecurity and technology risk oversight, ensuring risks introduced through external vendors, partners, and applications are effectively identified, assessed, and mitigated across the lifecycle. This role will lead and oversee inherent risk assessments, cybersecurity due diligence, and application security reviews, including application security testing across both thirdparty delivered solutions and internally managed systems and integrations, to evaluate end-to-end control effectiveness and shared responsibilities. The position oversees comprehensive control evaluations including due diligence questionnaires, documentation review, and control testing/validation across information security and technology risk domains, such as Identity and Access Management, Security Operations, Network Security, Cryptography, and Logging/Monitoring, while driving risk-based decisions, remediation activities, and formal risk acceptance where appropriate. The ThirdParty Security Lead partners closely with business units, procurement, legal, and technology stakeholders to ensure information security and technology risk requirements are embedded into thirdparty engagements, assess vendor connectivity and integration risks (e.g., cloud, APIs, and network access), and validate that both vendor and ONB-controlled application components meet established standards and regulatory expectations. The role ensures effective governance over ongoing monitoring, issue management, and remediation, while supporting audit and regulatory activities. Additionally, this position advances risk assessment methodologies beyond traditional due diligence toward integrated thirdparty and application security testing, continuous monitoring, and threat-informed assessments, strengthening ONB's overall information security and technology security posture. This role will foster a strong risk-aware culture across the enterprise and influence behaviors