Business Information Security Officer

Job Summary

A company is looking for a Business Information Security Officer.

Key Responsibilities:

• Analyze potential threats and vulnerabilities to systems, applications, and processes
• Educate and mentor stakeholders on threat modeling frameworks and principles
• Assess security metrics and track progress towards a successful security program implementation

Required Qualifications:

• Experience working with OWASP, NIST, and ISO security standards and frameworks
• Strong knowledge of enterprise application architectures and cloud architectures
• Experience with threat modeling, security design reviews, and pen testing
• Working knowledge of application security concepts and best practices
• Certification required in CISSP, SANS, GIAC, CEH, or other security risk assessment