Business Information Security Officer

Jobgether; United States; A distancia; USD 125.000 - 225.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare coverage

401(k) plan

Employee stock ownership plan

Life insurance

Paid time off

Remote work within US

Professional development

Descripción de la vacante

Jobgether is seeking a Business Information Security Officer in the United States to help align security initiatives with business priorities and regulatory requirements. You will work with executives, IT, legal, and risk teams to shape strategy and promote enterprise resilience.

This leadership role focuses on governance, incident preparedness, and security awareness programs, aiming to embed security into daily business decisions while balancing risk with strategic objectives.

Formación

• Bachelor’s degree in Information Security or related field with at least 10 years of experience, or a master’s degree with >=9 years.
• Proven senior information security leadership with governance and risk management.
• Experience advising executives and translating security into business terms.
• Experience designing global cybersecurity solutions across diverse environments.
• Familiarity with ISO 27001 and NIST CSF and regulatory requirements.
• Professional certifications such as CISSP, CISM, CRISC, or CISA (two required).

Responsabilidades

• Develop cybersecurity strategies aligned with business objectives and risk priorities.
• Act as liaison between executives, CISO, ISRM teams to align strategy.
• Lead BISO advisory capability coordinating IT, legal, risk, and business.
• Coordinate incident response and post-incident reviews.
• Design security awareness and training programs.
• Oversight of security controls and compliance with frameworks.
• Monitor threats and regulatory developments.

Conocimientos

Executive leadership

Security governance

Risk management

Strategic communication

Regulatory compliance

Cross-functional collaboration

Security architecture

CISSP/CISM/CRISC/CISA

ISO 27001 knowledge

NIST CSF knowledge

Educación

Bachelor’s degree in Information Security

Master’s degree in a related field

Descripción del empleo

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Business Information Security Officer based in the United States.
As a Business Information Security Officer, you will play a strategic role in strengthening enterprise cybersecurity by aligning security initiatives with business priorities and regulatory requirements. You will serve as a trusted advisor to business leaders, bridging the gap between cybersecurity teams and operational functions to ensure risks are effectively identified, assessed, and mitigated. Working closely with executive stakeholders, IT teams, legal experts, and risk management professionals, you will help shape security strategies and promote organization-wide resilience. You will lead security governance initiatives, coordinate incident response preparedness, and champion awareness programs that embed security into everyday business decisions. This opportunity offers a high-impact leadership role in a collaborative, technology-driven environment where cybersecurity is viewed as a business enabler. The ideal candidate combines executive-level communication, strategic thinking, and deep technical expertise to build a proactive and security-conscious organizational culture.

Accountabilities

• Develop and implement cybersecurity strategies aligned with business objectives, enterprise risk management priorities, and applicable regulatory requirements.
• Identify, assess, prioritize, and mitigate information security risks across business units using established risk management frameworks and industry best practices.
• Serve as the primary liaison between business stakeholders, the Chief Information Security Officer (CISO), and Information Security and Risk Management (ISRM) teams, ensuring effective communication and strategic alignment.
• Advise senior executives and business leaders on cybersecurity risks, emerging threats, security investments, and mitigation strategies to support informed decision-making.
• Establish and lead a Business Information Security Officer (BISO) advisory capability, bringing together IT, legal, risk management, and business representatives to coordinate security priorities and initiatives.
• Support the design and implementation of global security solutions that strengthen enterprise security capabilities while addressing business-specific requirements.
• Ensure security policies, controls, and practices align with recognized frameworks, including ISO 27001 and the NIST Cybersecurity Framework (CSF), as well as relevant compliance obligations.
• Coordinate incident response activities, facilitating timely engagement among security teams and business stakeholders during cybersecurity incidents.
• Lead post-incident reviews and tabletop exercises to evaluate response effectiveness, identify vulnerabilities, and improve organizational preparedness.
• Design and deliver security awareness and training programs that strengthen employee understanding of cybersecurity threats, responsibilities, and best practices.
• Promote a proactive security culture across all organizational levels, integrating risk awareness into business processes, technology initiatives, and operational decisions.
• Apply project management, data analytics, and problem-solving methodologies to evaluate security performance, track initiatives, and drive continuous improvement.
• Collaborate with internal teams and external partners to assess security requirements, evaluate solutions, and support effective vendor and contract negotiations where necessary.
• Monitor evolving cybersecurity threats, technologies, and regulatory developments to identify opportunities to improve the organization’s overall security posture.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field, with at least 10 years of relevant professional experience; alternatively, a master’s degree with at least 9 years of relevant experience.
• Demonstrated experience in a senior information security leadership or executive role, with a strong understanding of enterprise cybersecurity strategy, governance, and risk management.
• Proven experience acting as a trusted advisor to executives and key stakeholders, translating complex security challenges into practical business recommendations.
• Experience designing and implementing global cybersecurity solutions across diverse business units, technical environments, and organizational structures.
• In-depth knowledge of information security management frameworks, particularly ISO 27001 and NIST CSF, along with regulatory compliance requirements and industry security standards.
• Strong expertise in cybersecurity risk assessment, risk mitigation planning, security governance, and the evaluation of security controls.
• Experience coordinating incident response, crisis management, post-incident reviews, and security preparedness exercises.
• Excellent communication, presentation, and interpersonal skills, with the ability to engage effectively with senior executives, technical teams, legal professionals, and business stakeholders.
• Strong leadership, project management, analytical, and problem-solving capabilities, including the ability to manage competing priorities and drive cross-functional initiatives.
• Demonstrated ability to foster collaboration between cybersecurity functions and business operations, promoting a risk-aware culture while supporting organizational objectives.
• Professional certifications such as CISSP, CISM, CRISC, or CISA, with at least two of these credentials required.
• Preferred: Advanced degree in cybersecurity, information systems, risk management, or a related discipline.
• Preferred: Experience negotiating contracts, managing vendors, and evaluating third-party security capabilities.
• Preferred: Extensive expertise in cybersecurity risk management, including conducting assessments, identifying control gaps, and recommending appropriate remediation strategies.
• Preferred: Previous experience serving as a Chief Information Security Officer (CISO) within a medium-sized or large enterprise.
• Strong adaptability and strategic judgment, with the ability to navigate complex organizational environments and balance security requirements with business needs.
• No security clearance is required for this position.

Benefits

• Annual base salary: $125,100–$225,200, depending on qualifications, experience, and other relevant factors.
• Comprehensive healthcare coverage: Medical, dental, and vision insurance options.
• Retirement savings: Access to a 401(k) plan to support long-term financial planning.
• Employee ownership: Participation in an Employee Stock Ownership Plan (ESOP), subject to applicable plan terms.
• Life insurance: Coverage options to support employees and their families.
• Paid time off: Paid leave and company holidays to encourage a healthy work-life balance.
• Flexible work arrangements: Remote work opportunity within the United States, with flexible scheduling options.
• Professional development: Opportunities to expand executive leadership capabilities, deepen cybersecurity expertise, and contribute to enterprise-wide security initiatives.
• Strategic impact: The opportunity to influence cybersecurity governance, strengthen organizational resilience, and align security investments with business priorities.
• Collaborative environment: Work with multidisciplinary teams and senior stakeholders to address complex security challenges and deliver innovative solutions.
• Career growth: Opportunities to develop professionally while contributing to high-impact corporate cybersecurity programs.

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.