Business Information Security Officer

Jabil; Saint Petersburg (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Jabil, a global engineering and manufacturing solutions company, seeks a Business Information Security Officer (BISO) to own security program for a specified business segment. You will advise stakeholders on protections, customer requirements, and regulatory controls to minimize risk and enable secure business operations.

The role requires a deep understanding of security policies, controls, and cross-functional collaboration with IT, legal, and business leaders, including remediation leadership

Qualifications

• Bachelor's degree in a technical field (Information Security, MIS, CS or Engineering).
• 8+ years information security experience; 2-3 years in a lead role.
• Security certifications preferred: CISM, CISSP, CISA.

Responsibilities

• Serve as the information security program owner for assigned business segment.
• Advise stakeholders on security protections, customer requirements, and regulatory controls.
• Lead security risk assessments for mergers & acquisitions and report findings.

Skills

Security regulations knowledge

Security policies

Communication with stakeholders

Security controls implementation

Risk assessment

Security awareness

Relationship building

Liaison between IT & business

Education

Bachelor's degree

Job description

At Jabil (NYSE: JBL), we are proud to be a trusted partner for the world's top brands, offering comprehensive engineering, supply chain, and manufacturing solutions. With 60 years of experience across industries and a vast network of over 100 sites worldwide, Jabil combines global reach with local expertise to deliver both scalable and customized solutions. Our commitment extends beyond business success as we strive to build sustainable processes that minimize environmental impact and foster vibrant and diverse communities around the globe.

Job Summary

The Business Information Security Officer (BISO) is the information security program owner for their assigned business segment. The BISO is an expert at the company's information security program capabilities such as security policies and technical security solutions. The BISO advises business stakeholders on the company's security protections, customer security requirements, and regulatory security controls with the objective of minimizing the businesses' information risk exposure and achieving secure business enablement.

Responsibilities

• Engages assigned business as the central point of contact for information security and advocates security control needs of assigned business while also advocating for the company’s security initiatives and controls deployment.
• Stays knowledgeable about the company’s technical controls and advocates for the technical security control needed by assigned business and applies knowledge of company’s technical control capabilities.
• Promotes corporate security awareness activities and implements security awareness concepts locally for assigned business and customizes communications to be suitable for local language and culture.
• Promotes and evangelizes the company’s IT Security Policies and Standards.
• Advises stakeholders on security deviation control alternatives, such as compensating controls, and supports stakeholders through the policy deviation process.
• Provides security consulting and advice for Mergers & Acquisitions by performing on-site or remote security risk assessments and writing report of findings and recommendations in terms suitable for the business to make informed data and computer security risk decisions.
• Present monthly security status report for assigned business to stakeholders such as the CISO, CIO(s), CTOs, and IT Managers.
• Presents executive-level communications regarding the state of security for assigned business.
• Provides security consulting and advice for customer audits, regulatory audit, technical vulnerability assessments (TVAs) and other security-related audits.
• Reviews and analyzes security components of audit plans and applies knowledge and expertise of IT Security policies and locally deployed security processes and procedures to ensure a successful audit outcome.
• Provides leadership for remediation activities and assembles necessary resources to ensure successful remediation results.
• Advises stakeholders on incident investigations and champions stakeholders through the security incident process.

BISO Skills

Security Specific and People Skills

• Expert in U.S. and international security and privacy regulations such as CMMC, DFARS, HIPAA, CCPA, GDPR, etc.
• Expert in security industry standards (SIS) and able to apply SIS to unique business and information technology situations. (i.e. ISO-27001, NIST, ITIL Security Management, PCI-DSS, NIS2, TISAX)
• Expert knowledge of customer security requirements and company’s obligation for protecting customer information assets in company’s care.
• Able to create and implement methodologies to support BISO security consulting and advisory services.
• Able to build positive relationships and rapport with customers and Jabil teams (i.e. Business stakeholders, IT Security Teams, IT Managers/Directors, IT Network Team, Legal Team, etc.).
• Serves as a liaison between Corporate IT, Business leaders, and Information Security organizations, advocating on behalf of each, presenting customers’ needs/requirements to Global Cybersecurity leadership.

Leadership Capabilities (People Leader)

Career Stream

• Develops strategic vision and direction for security teams.
• Cultivates a culture of continuous improvement and innovation.
• Empowers managers and staff to take ownership of security outcomes.

Education & Experience Requirements

• Required: Bachelor's Degree. Prefer a degree in a technical field such as Information Security, Management Information Systems, Computer Science, or Engineering.
• 8+ years of Information security practice or related field and 2 - 3 years experience in a Lead Role.
• Preferred: Security Certification: CISM, CISSP, CISA.
• Preferred: 3 plus years successful work experience as a BISO.
• Preferred: Experience in the Automotive and/or Healthcare cybersecurity space.
• Excellent communication skills; written, oral, and presentation.

Jabil, including its subsidiaries, is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, age, disability, genetic information, veteran status, or any other characteristic protected by law.

If you are a qualified individual with a disability, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Jabil.com/Careers site as a result of your disability. You can request a reasonable accommodation by sending an e-mail to [e-mail] or calling 727-803-7988 with the nature of your request and contact information. Please do not direct any other general employment related questions to this e-mail or phone number. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to.