Director, Business Information Security Officer (BISO)

ABM Industries; Cumming (GA); Hybrid; USD 177,000 - 240,000; Full time

Job summary

ABM Industries is seeking a strategic Cybersecurity Director, BISO, to serve as the primary advisor to leadership and to align security with business objectives at ABM. The role bridges strategy and risk across diverse technology initiatives and is embedded in business operations.

The BISO will embed security, privacy, resilience, and risk-management principles, partnering with Legal, Compliance, Privacy, and IT teams to enable growth while maintaining controls.

Qualifications

• Bachelor's degree or equivalent in a related field.
• Twelve+ years of experience in cybersecurity, technology risk, information security, or related disciplines.
• Five+ years in an operationally focused cybersecurity or information risk role.
• Experience advising senior business and technology leaders.
• Experience developing or managing business impact analyses and resilience plans.
• Experience translating business requirements into cybersecurity and risk requirements.
• Experience leading cyber risk, governance, security, or resilience programs in a complex org.
• Strong understanding of cloud security, IAM, data protection, security architecture, and risk management.
• Familiarity with SOX, HIPAA, CPRA, GDPR, and privacy/security requirements.
• Knowledge of frameworks like NIST CSF, NIST 800-53, ISO 27001, COBIT, CIS Controls.

Responsibilities

• Serve as the primary cybersecurity advisor to business and corporate leadership.
• Align cyber risk management with business priorities and operational objectives.
• Embed security, privacy, and resilience requirements into projects, applications, and technology solutions.
• Lead business continuity, disaster recovery, cyber recovery, and resilience planning efforts.
• Translate cybersecurity risks and metrics into actionable business insights for executives.
• Advise on AI, cloud, automation, and emerging technology risks and governance.
• Partner with Legal, Compliance, Privacy, Internal Audit, Enterprise Risk, and Technology teams.
• Champion a strong enterprise-wide culture of security awareness and accountability.

Skills

Cybersecurity strategy

Executive communication

Risk management

Business continuity

Disaster recovery

Regulatory compliance

Cloud security

IAM

Security architecture

NIST/ISO frameworks

Education

Bachelor's degree or equivalent

Master's degree (preferred)

Certifications: CISSP / CISM / CRISC (preferred)

Job description

ABM (NYSE: ABM) is a leading provider of facility, engineering, infrastructure, and mobility solutions. With approximately $8.7 billion in fiscal 2025 revenue, more than 100,000 team members, over 350 offices, and more than 20,000 clients, ABM serves customers across a diverse range of industries throughout the United States and international locations.

ABM's capabilities include facility services, engineering and infrastructure solutions, technical solutions, aviation services, manufacturing and distribution support, education services, energy solutions, HVAC and mechanical services, electrical services, janitorial services, landscaping, mission-critical solutions, parking, and mobility services. ABM provides these capabilities through stand-stand and integrated solutions designed to help clients operate safer, healthier, more sustainable, and more efficient spaces.

ABM is seeking a strategic and business-focused Cybersecurity Director, Business Information Security Officer (BISO) to serve as the primary cybersecurity advisor to business and corporate leaders within the Information Security organization. Reporting directly to the SVP and CISO, this leader will bridge cybersecurity strategy, technology risk, resilience, and business operations while helping enable growth and innovation.

The BISO serves as a trusted cybersecurity advisor to ABM's business units and corporate functions. This individual understands cybersecurity risks, business operations, emerging technologies, and security controls and can translate complex security issues into practical business decisions.

The BISO works in partnership with business leaders, technology teams, project managers, legal and compliance teams, third parties, and subject matter experts to identify and manage risk throughout the business and technology lifecycle. The role is responsible for embedding security, privacy, resilience, and risk-management principles into business strategies, projects, applications, infrastructure, and emerging-technology initiatives.

Hybrid Mode l:

This position is an in-office role requiring work on-site four days per week. The role may require occasional travel, extended hours, or participation in incident response and resilience activities based on business needs.

Benefits :

ABM offers a comprehensive benefits package. For information about ABM's benefits, visit ABM Employee Benefits | Staff & Management.

Pay:

$176,505 - $240,000 – The pay listed is the salary range for this position. Any specific offer will vary based on the successful applicant's education, experience, skills, abilities, geographic location, and alignment with market data. You will also be eligible to participate in a company incentive or bonus program. You may be eligible to participate in a Company incentive or bonus program.

What You Will Do

• Serve as the primary cybersecurity advisor to business and corporate leadership.
• Align cyber risk management with business priorities and operational objectives.
• Embed security, privacy, and resilience requirements into projects, applications, and technology solutions.
• Lead business continuity, disaster recovery, cyber recovery, and resilience planning efforts.
• Translate cybersecurity risks and metrics into actionable business insights for executives.
• Advise on AI, cloud, automation, and emerging technology risks and governance.
• Partner with Legal, Compliance, Privacy, Internal Audit, Enterprise Risk, and Technology teams.
• Champion a strong enterprise-wide culture of security awareness and accountability.

Required Experience

• Bachelor's degree or equivalent experience.
• Twelve or more years of experience in cybersecurity, technology risk, information security, or related disciplines.
• At least five years of experience in an operationally focused cybersecurity, information risk, technology risk, or information security role.
• Experience advising senior business and technology leaders.
• Demonstrated experience developing or managing business impact analyses, business continuity plans, disaster recovery plans, cyber recovery plans, resilience strategies, or related testing programs.
• Experience translating business requirements and operational priorities into cybersecurity, technology risk, and resilience requirements.
• Experience leading cyber risk, governance, security, or resilience programs in a complex organization.
• Strong understanding of cloud security, IAM, data protection, security architecture, and risk management.
• Familiarity with applicable legal, regulatory, and industry requirements, including SOX, HIPAA, CPRA, GDPR, and other relevant privacy and security requirements.
• Knowledge of recognized cybersecurity and risk-management frameworks, such as NIST Cybersecurity Framework, NIST 800-53, ISO 27001, COBIT, CIS Controls, or similar frameworks.

Preferred Experience

• Master's degree in business, computer science, information security, information systems, risk management, or a related field.
• CISSP, CISM, CRISC,