Sr Manager, Business Information Security Officer

DXC Technology Company; Tulsa (OK); On-site; USD 166,000 - 307,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Retirement plan

Paid time off

Job summary

DXC Technology Company seeks a Senior Manager - Business Information Security Officer (BISO) to embed cybersecurity strategy and governance into multiple business units. The role reports to the Global CISO and focuses on risk management, control effectiveness, and enabling secure growth across DXC’s services.

As a strategic advisor, you will oversee cyberscurity priorities, drive remediation of high-priority risks, and ensure alignment with enterprise standards while protecting clients, data,

Qualifications

• Bachelor's degree or higher in CS/InfoSec or related discipline.
• Minimum 12 years in information security, cybersecurity, or risk management.
• Senior cybersecurity leadership experience in global, regulated environments.

Responsibilities

• Provide strategic cybersecurity leadership to business units and leadership teams.
• Collaborate with Global Cybersecurity to align with enterprise standards and threat intel.
• Establish and lead business unit cybersecurity governance and risk reviews.
• Translate security findings into business impact and actionable risk-based recommendations.
• Oversee audit readiness and regulatory compliance activities.
• Engage with clients and stakeholders to communicate security posture and resilience.

Skills

Cybersecurity leadership

GRC & risk management

Executive reporting

Stakeholder management

Security governance

Regulatory alignment

Education

Bachelor's degree in Computer Science or Information Security

Advanced degree preferred

Tools

GRC platforms

Threat intelligence sharing

Security metrics & reporting

Job description

Job Description:

DXC Technology is expanding its global cybersecurity program to further strengthen cyber governance, risk management, regulatory compliance, and operational resilience across its business operations. We are seeking an experienced Senior Manager - Business Information Security Officer (BISO) to support key business units and service lines.

Representing the Global Chief Information Security Officer (CISO), the BISO is responsible for embedding cybersecurity strategy, governance, and risk management practices into business unit operations, strategic initiatives, and service delivery.

As a trusted strategic advisor to business unit leadership, this role provides oversight and direction on the organization's security posture, risk exposure, control effectiveness, and cybersecurity priorities. The BISO partners closely with business and technology leaders to strengthen security maturity, support informed risk-based decision‑making, and ensure that cybersecurity remains an integral part of business operations while protecting clients, data, services, and DXC's reputation.

Key Responsibilities

Strategic Cybersecurity Leadership & Governance

• Serve as a trusted cybersecurity advisor to business unit leadership, providing strategic guidance on emerging cyber threats, security posture, control effectiveness, and operational resilience.
• Partner with Global Cybersecurity leadership to ensure alignment with enterprise security strategies, policies, standards, and emerging threat intelligence.
• Establish and lead business unit cybersecurity governance, including security health reporting, risk reviews, and executive‑level updates.
• Promote cybersecurity as a business enabler, supporting secure growth, innovation, operational resilience, and client trust.

Cyber Risk & Control Management

• Oversee the business unit cybersecurity risk register, ensuring that material risks, control gaps, vulnerabilities, and emerging threats are identified, assessed, prioritized, and effectively managed.
• Drive remediation of high‑priority cybersecurity risks and control deficiencies in collaboration with technology, engineering, architecture, and operational stakeholders.
• Oversee the implementation and effectiveness of cybersecurity hygiene controls, ensuring alignment with enterprise requirements and business operations.
• Translate technical security findings, threat intelligence, and control weaknesses into clear business impacts, risk assessments, and actionable recommendations for leadership.
• Partner with security architecture and cyber engineering teams to embed baseline security controls into products, services, technology changes, and transformation initiatives.
• Engage early in business strategy, transformation, and delivery initiatives to proactively identify cybersecurity requirements and address potential risks.

Audit, Compliance & External Engagement

• Serve as the senior point of contact for cybersecurity‑related audits, regulatory examinations, corporate security reviews, and control assessments.
• Ensure audit readiness through effective oversight of supporting evidence, management responses, and timely remediation of security findings.
• Monitor compliance with enterprise cybersecurity standards, regulatory requirements, and applicable control frameworks.
• Engage with clients and external stakeholders, as required, to communicate DXC's cybersecurity posture, control environment, resilience capabilities, and risk management practices.

Required Qualifications & Experience

Education & Professional Experience

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related discipline, or equivalent relevant professional experience. An advanced degree is preferred.
• Minimum of 12 years of experience in information security, cybersecurity, cyber risk management, or related technology disciplines.
• Significant experience in senior cybersecurity leadership and risk management roles within complex, global, and highly regulated environments.

Technical & Professional Expertise

• Deep knowledge of cybersecurity threats and security domains, including security controls, vulnerability management, identity and access management, incident response, security architecture, and operational resilience.
• Strong understanding of cybersecurity governance, enterprise risk management, regulatory requirements, audit processes, issue management, and Governance, Risk, and Compliance (GRC) platforms.
• Demonstrated experience with cybersecurity maturity models, risk management methodologies, and industry‑recognized frameworks, including NIST, ISO 27001, and CIS Controls.
• Experience developing and managing metrics‑driven cybersecurity programs, including security performance indicators, risk reporting, and control effectiveness assessments.
• Proven ability to influence and advise senior business stakeholders on complex cybersecurity and risk matters, translating technical issues into business impact and practical, risk‑based recommendations.
• Excellent stakeholder management, communication, presentation, and executive reporting skills.
• Ability to operate effectively in fast‑paced, complex, matrixed environments, collaborating across multiple business functions, technology teams, and geographies.
• Experience building, scaling, or maturing cybersecurity programs across multiple business units or global regions is highly desirable.

Compensation at DXC

Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job‑related knowledge, skills, competencies, as well as contract‑specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300.

Full‑time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in‑person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We're committed to fostering an inclusive environment where everyone can thrive.

Disability Accommodations

If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email ([e-mail]) .

Please note: DXC will respond only to requests for accommodations due to a disability.

DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.

We participate in E‑Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. The posting is intended to support the company’s DOL (Department of Labor) verification requirements. Postings are available in English, and in Spanish, where required.

Postings Link (https://mandatoryview.com/?licenceid=c38a7700-5aa2-48a3-b95a-22e6e1fb0721&producttype=onlineapplicant)