GENERAL FUNCTION: The Principal Business Information Security Officer (BISO) is responsible for assisting the BISO Manager with defining, developing, and leading the Line of Business (LOB) BISO team of Information Security (IS) professionals within the business who provide an additional layer of defense by guiding the LOB to reduce information security risk in business processes through strategic consulting, education, and analysis.
Provides consultation and thought leadership to business teams on information security matters based on security expertise, the company's risk tolerance, and information security requirements. Bridges the gap between business leaders and Information Security by providing consultation to business teams on information security matters based on the company's risk tolerance and information security requirements.
Consulting is prioritized daily based on the greatest security concerns and current strategic initiatives. Leveraging Information Security policies, standards, and procedures in conjunction with information security expertise, the LOB BISO is a critical resource to assist the LOB with removing business process barriers encountered due to information security requirements.
Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank's risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.
ESSENTIAL DUTIES & RESPONSIBILITIES:Leadership- Assist leading strategic direction for the Frontline LOB BISO program.
- Help drive Frontline LOB BISO team to prioritize LOB consulting on the greatest information security concerns and strategic initiatives to reduce IS risk.
- Help facilitate LOB BISOs to develop consistent processes to optimize the value add as they advise their respective LOB on relevant information security risks, contribute to the development of risk-reducing measures, and support IS policies and strategic initiatives.
- Work collaboratively with business leaders, risk partners, and other internal groups leaders to balance risk management with business initiatives, regulations, and customer experience.
- Participate in cross-functional groups to challenge current processes, identifying current opportunities for process improvement, efficiency/effectiveness, and consistency to drive continuous improvement in results.
- Facilitate issue research, root cause and trend analysis, and LOB/partner discussions to determine issue resolution or present potential solutions to BISO manager.
- Help drive process improvement for BISO processes and when appropriate facilitate cross functional teams to document and discuss end to end processes.
- Provide indirect leadership by mentoring other BISOs as needed.
- Collaborate with IS on process changes with end user impact; participate in planning and implementation strategy discussions.
- Participate in information security related councils and working groups, as appropriate.
- Influence strategic direction of LOB BISO program to focus on activities that add the most value to LOBs.
- Advocate and socialize the LOB BISO program strategy with all stakeholders.
Advise and Consult LOB on Information Security Risks- Promote Security Awareness communications / activities and educate LOB as appropriate.
- Provide guidance to comply with IS requirements and navigate resulting business process challenges.
- Approve decisions on high risk IS processes such as elevated access (all DLP entitlements) requests based on business justifications.
Serve as Liaison Between LOB and IS for Security-Related Processes, Initiatives, and Communications - Serve as point of contact for information security concerns / risks within LOBs, including insider threat.
- Provide input on IS process changes with end user impact and Enterprise-wide communications prior to implementation / distribution.
- Partner with IS Information Protection on enterprise data protection strategies.
- Reinforce bank wide communication on changes to IS policies / requirements.
- Identify opportunities for Security Awareness training and education.
KRI Monitoring, Review, and Reporting- Report KRI results, perform trend analysis, and share opportunities for improvement with LOB leaders.
- Drive Phishing and Data Loss Prevention (DLP incident) awareness and accountability in LOBs.
- Provide input to information security related KRIs / metrics that are geared towards the LOBs.
SUPERVISORY RESPONSIBILITIES: Provides employees timely, candid and constructive performance feedback, develops employees to their fullest potential by providing challenging opportunities, develops the appropriate talent pool to ensure adequate bench strength and succession planning, and recognizes and rewards employees for accomplishments.
MINIMUM KNOWLEDGE, SKILLS, & ABILITIES REQUIRED:- Bachelor's Degree or equivalent experience.
- Seven years minimum experience, combination business and information security experience.
- Information Security knowledge / expertise.
- Banking industry knowledge or experience.
- Fifth Third Line(s) of Business knowledge or equivalent experience.
- Project management experience.
- Demonstrated analytical aptitude with an emphasis on investigative methodical critical questioning and logical thinking.
- Demonstrated ability to interpret and apply policies and regulations across a large, complex business.
- Demonstrated ability to identify and mitigate information security risks within business processes
- Ability to manage multiple complex priorities while remaining flexible when priorities shift as the LOB BISO program matures.
- Demonstrated high level of interpersonal skills with ability to interact with employees and leaders at multiple levels and be a positive influence during LOB BISO team and stakeholder interactions.
Working Conditions:- Normal office environment with little exposure to dust, noise, temperature, etc.
- Available 24/7 for information security incident / issue analysis and resolution.
Principal Business Information Security Officer
The base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.
Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. You can learn more about those programs on our 53.com Careers page at: https://www.53.com/content/fifth-third/en/careers/benefits.html or by consulting with your talent acquisition partner.
LOCATION -- Cincinnati, Ohio 45227
Attention search firms and staffing agencies: do not submit unsolicited resumes for this posting. Fifth Third does not accept resumes from any agency that does not have an active agreement with Fifth Third. Any unsolicited resumes - no matter how they are submitted - will be considered the property of Fifth Third and Fifth Third will not be responsible for any associated fee.
