Business Information Security Officer

Business Information Security Officer (BISO)

Location: Remote
Duration: 12+ Months
Experience Required: 10+ Years (Cybersecurity / Risk / Governance)

Job Summary

We are seeking an experienced Business Information Security Officer (BISO) to serve as the primary cybersecurity liaison between Cybersecurity leadership and Lines of Business (LOB) / IT organizations.

This role ensures the successful integration of cybersecurity practices into business initiatives, technology programs, and software development lifecycles. The ideal candidate will combine strong risk management expertise with excellent stakeholder communication and governance capabilities.

Key Responsibilities

Business & Cybersecurity Alignment

• Serve as the principal cybersecurity point of contact for assigned Line(s) of Business.

• Translate business needs into cybersecurity requirements.

• Communicate business priorities and risks to Cybersecurity leadership.

Risk Management & Advisory

• Identify, assess, and communicate technology and information security risks.

• Assist business leaders in making informed risk-based decisions.

• Provide security design requirements aligned with IT policies and standards.

Secure SDLC & Project Engagement

• Participate in major initiatives to ensure security controls are integrated early in the project lifecycle.

• Review architecture and system designs for security compliance.

• Advocate for secure-by-design principles.

Governance & Policy Support

• Contribute to the development of security processes, procedures, and guidelines.

• Ensure alignment with enterprise information security policies.

• Monitor industry security trends and recommend best practices.

Stakeholder Communication & Reporting

• Respond to cybersecurity-related inquiries from business stakeholders.

• Provide recurring reporting on progress, risks, and security metrics.

• Promote transparency and foster strong cross-functional collaboration.

• Serve as a cybersecurity subject matter expert (SME) across business units.

Core Competencies

• Information Security Governance

• Risk Assessment & Risk Management

• Secure SDLC & Security Architecture Collaboration

• Regulatory & Policy Compliance

• Stakeholder & Executive Communication

• Security Metrics & Reporting

Ideal Candidate Profile

• Strong experience working in enterprise cybersecurity governance roles

• Ability to influence without direct authority

• Strong executive-level communication skills

• Experience aligning cybersecurity with business strategy

• Background in financial services or regulated environments (preferred)