Business Information Security Officer

Job Summary

Aligning cybersecurity strategies with business goals, the full-time remote Business Information Security Officer will manage risks, foster a robust security culture, and serve as a liaison between business units and the cybersecurity team.

Key responsibilities

• Develop and execute cybersecurity strategies that align with business objectives and regulatory requirements
• Establish and lead a BISO Advisory capability, facilitating collaboration among IT, legal, and risk management representatives
• Coordinate incident response efforts and conduct post-incident reviews to enhance preparedness

Required qualifications

• Bachelor's Degree and minimum 10 years of experience in Information Security, Cybersecurity, or a related field; or master's degree and 9 years of experience
• Prior experience as a senior information security executive
• Demonstrated experience liaising and advising executive stakeholders on security matters
• Deep knowledge of information security management frameworks (ISO 27001, NIST CSF) and regulatory compliance requirements
• Possession of CISSP, CISM, CRISC, CISA certifications, or at least two of these credentials