Fortis Bank operates as a commercial bank across Colorado and Utah, with a presence in Denver and Salt Lake City. The institution serves businesses and affluent individuals through commercial banking, treasury management, healthcare-focused banking, and self-directed retirement solutions. Its model centers on relationship-driven service rather than scale, positioning itself as a community-focused alternative to larger institutions.
For security professionals, the threat model here is fundamentally financial. Treasury management services mean the bank handles corporate cash flow, investments, and financial risk instruments - all high-value targets for credential harvesting, business email compromise, and transaction fraud. Healthcare banking adds another layer: HIPAA-adjacent data obligations, since serving the healthcare vertical means processing and storing financial data intertwined with protected health information.
The bank's agility and personalized approach suggest a leaner technical operation, which typically means security teams wear multiple hats - building out controls, managing vendor risk, and responding to incidents without the luxury of deep specialization in every domain. If you want to own a broad security surface at a bank that moves fast and keeps its scope regional, that's the gig.
