Business Information Security Officer - GSC - US

Sysco Northeast Rdc; Houston (TX); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Sysco Northeast Rdc is seeking a BISO in Houston, Texas, for a hybrid role requiring strong Cybersecurity and risk management skills. The position focuses on overseeing Cybersecurity implementation across Sysco’s operating companies and enhancing communication between operations teams and enterprise security. Candidates must have a Bachelor’s Degree in a relevant field and at least 10 years of experience in Cybersecurity. Strong communication and business acumen are essential for success in this role.

Qualifications

• 10+ years experience in Cybersecurity and information risk management.
• Strong understanding of operational systems and environments.
• Knowledge of appsec protocols and development lifecycle.

Responsibilities

• Oversee Cybersecurity implementation across Sysco’s companies.
• Direct Security Leads across regions.
• Facilitate communication between operations and enterprise security.

Skills

Cybersecurity expertise

Risk management

Communication skills

Business acumen

Education

Bachelor’s Degree or above in Computer Science, Cybersecurity, Information Technology

Job description

This is a hybrid position requiring an on-site presence at our corporate headquarters in Houston, Texas, three to four days per week.

Job Summary

The BISO is a dedicated security professional that is able to balance risk management and Cybersecurity requirements. The role requires business acumen, technical acumen and strong consultative skills. Business operational understanding is critical because this role will engage with business leaders and operations stakeholders to enhance understanding, identification, and management of business risks.

Duties and Responsibilities

• Provide independent and objective oversight and monitoring for the implementation of Cybersecurity across Sysco’s operating companies.
• Direct and manage Security Leads across regions.
• Translate Policy(s) and Standards set forth by the Cybersecurity Risk and Compliance Management Team into the environment.
• Increase awareness and foster accountability for security across the enterprise.
• Facilitate bidirectional communication between operations teams globally and enterprise security while advocating for both in a balanced manner.
• Escalate risks and exceptions to Cybersecurity Risk and Compliance Management Team and Change Management.
• Participate in and assist with security incident readiness and response training & awareness including supporting cybersecurity incident response activities.
• Oversee responsibilities for both security and business continuity (governance, reporting, compliance, risk assessments, etc.).

Education Preferred

• Education (Bachelor’s Degree or above) related to Computer Science, Cybersecurity, Information Technology, or related fields

Experience Required

• 10+ years experience of Cybersecurity and or information risk management
• Knowledge and understanding of the design of the operational systems and operations environments
• knowledge of application and product system development lifecycle and tools and appsec protocols.
• Understand applications running in the operations environment and the resulting network traffic
• In-depth understanding of cybersecurity solutions and requirements within the food and service industry
• Excellent communication skills, with an ability to tailor and engage communication across all levels of the organization

Licenses/Certifications Preferred

• Certified Information on Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), GIAC Response and Industrial Defense (GRID)

Language Requirements

• Fluency in written and spoken English.

Physical Demands

• Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job.