Joyce Flinn, VP Information Security & Disaster Recovery Officer, has thirty-five years of
banking experience. She began in Retail and moved to Loan Operations, Finance, Item
Processing, IT, Risk Management, and back to IT. Joyce was appointed Information Security
Officer in 2001. She assumed the responsibilities of Disaster Recovery in 2017. Through these
years, she’s assisted in multiple project implementations and conversions, including the
implementation of the wide area network, core processing conversion, several mergers and
acquisitions, implemented the Vendor Management program, Information Security program,
assisted in developing the Enterprise Risk Management solution and assisted in development of
subsequent frameworks.
As part of the Risk Management function, Joyce assists in the creation of the risks and controls
to support the audit function. She completes vendor and operational risk assessments, initiated
various regulatory assessments, and implemented the Incident Response. She currently chairs the
company’s Cybersecurity committee and implemented the Cybersecurity program. Joyce
participated in the validation and development of the Cyber Risk Institute Cybersecurity Profile.
She recently assumed responsibility for Vendor Management and Operational Risk Assessments.
Joyce holds the Certified Risk and Information System Controls (CRISC).
Joyce lives in Oakland, MD with her husband, Gene. They have three daughters, two sons-in-
law, and two grandsons. Joyce is on the Board of the Community Trust Foundation, co-chairs the
Garrett Regional Health Center’s Gala Committee, and participates in various volunteer
organizations throughout the year.