Passumpsic Bank is a community financial institution operating since 1853, with 11 branches serving the Northeast Kingdom, Central Vermont, and New Hampshire's North Country. Its core business spans personal and business checking, savings, mortgages, home equity products, business loans, and financial advisory services through its Passumpsic Financial Advisors division.
For security professionals, the threat model centers on a regional bank's attack surface: protecting customer financial data, transaction integrity, and trust services infrastructure across a multi-branch footprint. The bank's investment and trust management divisions introduce additional regulatory complexity and data sensitivity. Community banks of this scale typically face phishing campaigns, business email compromise, ransomware targeting legacy systems, and third-party vendor risk from financial service integrations.
The organization's long operational history and community focus suggest a mature but potentially legacy-heavy IT environment - a common profile where security modernization meets real constraints around uptime, budget, and institutional knowledge. Roles here likely involve hands-on work across endpoints, network segmentation, compliance frameworks (FFIEC, GLBA), and incident response, often with direct visibility to executive leadership given the bank's size.
