Business Information Securirty Officer (BISO)

Phaxis; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Phaxis seeks a Senior Security Advisor to partner with technology, product, finance, legal, audit, and leadership to embed robust security across the business. You will map assets, identify risks, and drive governance across critical programs.

The role leads PCI, SOX, ISO 27001 and privacy efforts, coordinating with Legal on contracts, and aligning security with roadmaps while maintaining strong cross-functional communication across global teams.

Qualifications

• 10+ years of security experience in enterprise environments.
• Strong knowledge of NIST, PCI, ISO 27001 and privacy regimes.
• Ability to drive security programs with cross-functional teams.
• CISSP or CRISC certification preferred.

Responsibilities

• Serve as senior security advisor for the assigned business unit with leadership teams.
• Understand business operations and assets to identify security risks.
• Lead compliance and governance for PCI, SOX, ISO 27001 and privacy laws.
• Manage client security assurance activities and security contract requirements.
• Align cybersecurity with business objectives and roadmaps.
• Lead monthly risk steering committees and quarterly executive briefings.
• Drive adoption of security policies and remediation with stakeholders.
• Provide cybersecurity reporting and escalation during incidents.

Skills

Security leadership

Risk governance

Regulatory compliance

Security architecture

Cloud security

Stakeholder communication

Education

CISSP or CRISC certification

Job description

• Serve as the senior security advisor for the assigned business unit, partnering with technology, product, finance, legal, audit, compliance, and other leadership teams.
• Develop a comprehensive understanding of business operations, critical assets, applications, infrastructure, data, customers, partners, and technology environments to identify and manage security risks.
• Lead security compliance and governance activities, including PCI, SOX, ISO 27001, technology audits, and privacy initiatives such as GDPR and CCPA.
• Manage client security assurance activities, including customer security questionnaires, client audits and meetings, and collaboration with Legal on security-related contract requirements.
• Align cybersecurity strategy with business objectives, technology roadmaps, and product initiatives while ensuring security controls are incorporated throughout the development and implementation process.
• Lead cybersecurity risk governance by facilitating monthly risk steering committees and quarterly executive briefings covering threats, risks, program maturity, and key security initiatives.
• Drive adoption of enterprise security policies and standards, identify compliance gaps, and partner with stakeholders to implement effective remediation and standardized security solutions.
• Provide cybersecurity reporting and act as an escalation point for security incidents and issues, working closely with Incident Response, Cyber Defense, Product Security Engineering, and Enterprise Security teams.
• Bring 10+ years of security experience with strong knowledge of security frameworks, NIST, regulatory requirements, security architecture, cloud environments, and the ability to communicate effectively across global and matrixed organizations; CISSP or CRISC preferred.