Strategic BISO Leader: Cyber Risk & Business Enablement

CBRE Group, Inc.; Dallas, Northern (TX, KY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

CBRE Group, Inc. is seeking a Divisional Business Information Security Officer (BISO) to bridge cybersecurity and business operations across CBRE's divisions. The role acts as a trusted advisor, executing security strategy while enabling business objectives.

You will provide leadership in risk-based decision-making, promote security culture, and collaborate with legal, risk, internal audit, and technology teams to drive control adoption and timely remediation.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, or business administration.
• 3+ years in technology or tech-adjacent field.
• 3–5 years in cyber domains (SOC, security engineering, IAM, etc.).
• Experience in cybersecurity risk management preferred.
• Certifications such as ITIL, CISSP, CISM, CRISC, CISA are a plus.

Responsibilities

• Provide regular briefings to divisional leadership on security posture and risk reduction.
• Bridge business needs with cybersecurity by conveying voice of the business.
• Coordinate with Cybersecurity Office, Global BISO, and security teams to improve.
• Collaborate with Client Assurance and incident response teams during incidents.
• Drive remediation of audit findings and regulatory compliance gaps.
• Assist with client requests by linking stakeholders to security requirements.

Skills

Cybersecurity expertise

Risk management

Strategic advisory

Stakeholder engagement

Communication skills

Education

Bachelor’s Degree in Cybersecurity

Bachelor’s Degree in Computer Science

Bachelor’s Degree in Information Technology

Bachelor’s Degree in Business Administration

Tools

MS Office

Collaboration tools

Job description

CBRE Group, Inc. is seeking a Divisional Business Information Security Officer (BISO) to bridge cybersecurity and business operations across CBRE's divisions. The role acts as a trusted advisor, executing security strategy while enabling business objectives.

You will provide leadership in risk-based decision-making, promote security culture, and collaborate with legal, risk, internal audit, and technology teams to drive control adoption and timely remediation.