Job Description:Job DescriptionThe
Business Information Security Officer (BISO) serves as the senior information security partner within specific business units, responsible for aligning cybersecurity strategies with business goals, managing risks, and fostering a robust security culture across the organization. The BISO functions as a bridge between the cybersecurity team and business IT initiatives, providing expert guidance on security risks best practices.
The
Business Information Security Officer (BISO) is instrumental in safeguarding the company by seamlessly aligning cybersecurity strategies with business objectives. Serving as a pivotal link between the cybersecurity function and the business units, the BISO elevates the organization's security posture through expert risk management and proactive capability alignment by fostering a robust security culture, working collaboratively with diverse stakeholders, leveraging strong project management, data analytics, and leadership skills. This role ensures that cybersecurity is not merely a technical necessity but a strategic enabler of business success as well as competitive advantage.
Ultimately the
Business Information Security Officer (BISO will cultivate a cybersecurity-conscious culture throughout all levels of the business.
Responsibilities- Strategic Alignment & Risk Management Develop and execute cybersecurity strategies that align with business objectives and regulatory requirements.Identify, assess, and mitigate information security risks across business units, utilizing risk management frameworks.
- Leadership & Collaboration Serve as the primary liaison between business units, the CISO, and the Information Security and Risk Management (ISRM) team.Establish and lead a BISO Advisory capability, facilitating collaboration among IT, legal, and risk management representatives.
- Incident Response & Crisis Management Coordination Coordinate incident response efforts, ensuring swift engagement during a security incident.Conduct post-incident reviews and comprehensive tabletop exercises to enhance preparedness.
- Training & Awareness Design and deliver security awareness programs, emphasizing the importance of cybersecurity within business operations.
Qualifications- Bachelor's Degree and minimum 10 years of experience in Information Security, Cybersecurity, or a related field; or master's degree and 9 years of experience
- Prior, demonstrable experience as a senior information security executive
- Demonstration of experience in the consultative role of liaising and advising executive & key stakeholders on security matters
- Experience designing and implementing global security solutions.
- Deep knowledge of information security management frameworks (ISO 27001, NIST CSF) and regulatory compliance requirements.
- Proven ability to communicate effectively with a wide range of stakeholders, including executives and technical teams.
- Strong project management, data analytics, problem-solving, and leadership skills.
- Possession of CISSP, CISM, CRISC, CISA certifications, or at least two of these credentials.
Preferred:- Advanced degree in a related field.
- Experience with contract and vendor negotiations.
- Expertise in cybersecurity risk management, including conducting assessments and recommending solutions.
- Prior experience as a Chief Information Security Officer (CISO) of a medium or large enterprise.
Security Clearance Requirement:None
This position is part of our Corporate team.
Salary Range: $125,100.00 - $225,200.00
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP), 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!
This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.
