Business Information Security Officer (BISO)

Spectraforce Technologies, Inc.; Mount Laurel Township (NJ); On-site; USD 90,000 - 120,000; Full time

Job summary

Spectraforce Technologies, Inc. is seeking a Business Information Security Officer (BISO) to support the Currency Factory in Mount Laurel, NJ.

The role drives risk oversight, TARAs and CGAs validation, and currency uplifts ensuring Bank standards are met, while providing critical reporting to US GR&C teams. The BISO will coordinate with BISOs, BAOs, and TAOs, track compliance, manage scope, and deliver weekly updates on asset vulnerabilities and control gaps across applications within the

Qualifications

• 5+ years of information security experience.
• Experience with Archer tool.
• Experience with ServiceNow.
• Ability to conduct and document risk assessments.
• Familiarity with Risk Technology Framework and 1B line of defense.

Responsibilities

• Attend meetings/standups to identify Currency Factory scope.
• Review TARAs and CGAs with BISOs.
• Update assessments with BAO/TAO input to completion.
• Ensure projects stay within Currency Factory scope.
• Report to BISO teams and Currency Teams to keep informed.
• Participate in weekly meetings and maintain a tracker of work progress.

Skills

Info Sec 5yrs

Archer

ServiceNow

Risk assessments

Risk technology Framework

1B line of defense

Job description

Role: Business Information Security Officer (BISO)

Location: Mount Laurel, New Jersey

Duration: 12 Months - Extension possibly

Business Information Security Officer (BISO) in support of the Currency Factory for US applications.

A dedicated resource is required to support Currency Factory activities, including oversight of currency uplifts (updating of applications and their infrastructure off of end of support tools, infrastructure, solutions), validation of TARAs and CGAs, tracking control exceptions, and ensuring applications meet the Bank standards and the scope of the Currency Factory. This role also provides critical reporting and visibility to the U.S. GR&C team, enabling proactive identification of out-of-compliance assets and supporting overall portfolio alignment.

Typical Day-to-Day Responsibilities

• Attending meetings / standups to identify scope of "Currency Factory Work"
• Working with application assigned BISO to review assessments TARAs and CGAs**
• Update those assessments (working with BISO, the BAO and TAO) to complete.
• Ensure that project stays within defined scope of Currency Factory Work
• Report to both BISO teams and Currency Teams to keep both informed
• Participate in multiple meetins weekly - with uplift projects, with the Currency Factory Team, and the US BISO Team.
  Weekly tracker and reporting to be done to identify work completed, concerns identified.
• Track overall success of Currency Uplifts against reducing asset vulnerabilities, control gap assessments and End of Live/Support concerns

++ TARA - Technology Asset Risk Assessment - identifies inherent risk - down with tech owner

CGA - Control Gap Assessment - identifies residual risk - done with business owner

BAO = Business Asset Owner - TAO = Technology Asset Owner

Must-have hard skills:

• 1.) Info Sec 5yrs
• 2.) Archer
• 3.) ServiceNow
• 4.) Risk assessments
• 5.) Risk technology Framework
• 6.) 1B line of defense

Nice-To-Have

• CISSP \ CISM or similar industry certification/training