Are there any regulations dealing with bank security other than Section 208.61 of Reg. H?
Or does anyone have an audit program for this area that I could borrow?

12 CFR 326 - Minimum Devices and Procedures

Each agency has their own set of bank security regulations. You are only subject to Reg. H if your bank is regulated by the FRB. If you are regulated by another agency (OCC, OTS, FDIC) you should use their regulations.

Thanks!

The Webinar conducted by Dana Turner has a good overview of the broadening responsibilities of the "security officer" as required by Reg. H, but more importantly the course encourages out-of-the-box thinking to embrace all of the security infrastructure responsibilities that would be expected to involve a security executive -- incident management, information protection, emergency preparedness, fraud avoidance, investigations, risk assessments, etc. Check the BOL training listing.