Business Information Security Officer (BISO) – Technology Risk

Infotek Consulting Inc.; Mount Laurel Township (NJ); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Infotek Consulting Inc. is seeking an experienced Business Information Security Officer (BISO) to oversee technology risk and application currency within a large financial institution. The role focuses on risk assessments, control gaps, exceptions, and governance across the program.

The role operates in a hybrid environment from Mount Laurel, NJ, with a 12-month duration. Start expected November 1, 2026, working Monday–Friday during core business hours.

Qualifications

• 5+ years of Information Security / Technology Risk experience.
• Experience working within a 1B Line of Defense security or technology risk function.
• Strong hands-on experience conducting technology risk assessments.
• Strong understanding of technology risk frameworks and controls.
• Archer experience.
• ServiceNow experience.
• Experience assessing application and infrastructure security risks.
• Ability to independently manage multiple assessments, issues and remediation activities.
• Strong stakeholder management, reporting and time-management skills.

Responsibilities

• Provide BISO oversight for application and infrastructure currency initiatives.
• Review and validate TARAs and CGAs.
• Partner with Business and Technology Asset Owners to complete and update risk assessments.
• Identify and track vulnerabilities, control gaps, exceptions and end-of-life/end-of-support risks.
• Ensure technology upgrades remain aligned with security standards and program scope.
• Track remediation activities and overall risk reduction across the application portfolio.
• Maintain risk and control information using Archer and ServiceNow.
• Produce weekly reporting on progress, risks, concerns and outstanding activities.
• Partner with Information Security, technology, application and risk teams.
• Participate in regular project, BISO and governance meetings.

Skills

5+ years information security

1B LOD experience

technology risk assessments

risk frameworks and controls

Archer

ServiceNow

stakeholder management

reporting

Tools

Archer

ServiceNow

Job description

Must be on W2 - No third party recruiters/sub-vending permitted

Business Information Security Officer (BISO) – Technology Risk

Location: Mount Laurel, NJ – Hybrid, currently 2 days onsite, moving to 4 days

Duration: 12 months

Start: November 1, 2026

Schedule: Monday–Friday, core business hours

Role Overview

Seeking an experienced Business Information Security Officer (BISO) to support a large-scale application and technology currency program within a major financial institution. The role will provide security risk oversight for application and infrastructure upgrades, ensuring technology assets meet established security standards and risk requirements.

This is a 1B Line of Defense role with significant focus on technology risk assessments, control gaps, exceptions and security governance.

Key Responsibilities

• Provide BISO oversight for application and infrastructure currency initiatives.
• Review and validate Technology Asset Risk Assessments (TARAs) and Control Gap Assessments (CGAs).
• Partner with Business and Technology Asset Owners to complete and update risk assessments.
• Identify and track vulnerabilities, control gaps, exceptions and end-of-life/end-of-support risks.
• Ensure technology upgrades remain aligned with security standards and program scope.
• Track remediation activities and overall risk reduction across the application portfolio.
• Maintain risk and control information using Archer and ServiceNow.
• Produce weekly reporting on progress, risks, concerns and outstanding activities.
• Partner with Information Security, technology, application and risk teams.
• Participate in regular project, BISO and governance meetings.

Must-Have Qualifications

• 5+ years of Information Security / Technology Risk experience.
• Experience working within a 1B Line of Defense security or technology risk function.
• Strong hands-on experience conducting technology risk assessments.
• Strong understanding of technology risk frameworks and controls.
• Archer experience.
• ServiceNow experience.
• Experience assessing application and infrastructure security risks.
• Ability to independently manage multiple assessments, issues and remediation activities.
• Strong stakeholder management, reporting and time-management skills.

Nice-to-Have

• CISSP, CISM or comparable security certification.
• Experience with application currency, technology obsolescence or end-of-life/end-of-support remediation programs.