Cyber Security Business Information Officer (BISO)

About the role

We are looking for a Cyber Security Business Information Officer (BISO) to act as the primary security partner for assigned business units. In this role you will bridge business strategy with enterprise‑wide cybersecurity, ensuring security is embedded early and pragmatically across products, platforms and major initiatives.

Key responsibilities

• Build trusted relationships with senior stakeholders and serve as the main security liaison for designated business units.
• Embed security into business initiatives, product development and technology delivery from the outset.
• Sponsor and drive enterprise‑aligned security projects end‑to‑end.
• Provide expert guidance across concurrent IT, engineering and business projects.
• Oversee security assessments, including vulnerability management, penetration testing and third‑party risk.
• Translate findings into prioritized remediation plans with clear ownership.
• Contribute security input to solution architecture and major technology decisions.
• Act as point of contact for customer‑facing inquiries, audits and due‑diligence.
• Document and govern cyber risks, supporting risk‑acceptance and escalation processes.
• Develop and report security metrics to inform leadership and drive continuous improvement.

Required profile

• Several years of experience in a BISO or senior security leadership/advisory role.
• Strong cloud and application security background (AWS, Azure, GCP; secure SDLC).
• Bachelor’s degree in Engineering, Computer Science or equivalent, plus relevant security certifications.
• Proven ability to influence stakeholders without direct authority.

Required skills

• AWS, Azure, GCP
• Secure SDLC
• SIEM, SOAR, EDR/XDR, CSPM, SAST, DAST
• CI/CD pipeline integration, DevSecOps
• Risk assessments, threat modeling, control gap analysis
• Collaboration with SOC and Incident Response teams
• Knowledge of NIST, ISO 27001, CIS, GDPR frameworks