Technology Director – BISO

Jobtailor; North Carolina; On-site; USD 180,000 - 320,000; Full time

Job summary

Jobtailor seeks a seasoned cybersecurity risk leader to own the risk posture across a business unit. You will translate threats into actionable business decisions, monitor risk trends, and advise executives on mitigation and investment priorities.

Embed security into transformation and strategic programs, and drive governance reporting for senior leadership. Expect to collaborate across Risk, Compliance, Audit, and Regulatory Relations, aligning cybersecurity with enterprise standards and risk

Qualifications

• 10+ years of Technology Strategic Leadership experience or equivalent
• 10+ years of cybersecurity, technology risk, or information security experience
• 4+ years of management or leadership experience
• 3+ years in a senior security leadership role (e.g., BISO, CISO)
• Ability to travel up to 10%
• Not eligible for visa sponsorship or relocation assistance
• Experience with regulatory examinations and enterprise risk management

Responsibilities

• Own the cybersecurity risk posture for the assigned business unit.
• Translate threats, vulnerabilities, and control gaps into risk decisions.
• Monitor emerging threats and material risk trends for prioritization.
• Advise executive leadership on risk tradeoffs and actions.
• Embed security guidance into business initiatives and strategic programs.
• Lead governance reporting for risk committees and senior leaders.
• Present risk trends and remediation progress through dashboards and briefings.
• Coordinate with Risk, Compliance, Audit, and Regulatory Relations teams.

Skills

Cybersecurity Risk Mgmt

Executive Communication

Cross-functional Leadership

Stakeholder Management

Regulatory Compliance

Strategic Risk Leadership

Ambiguity Management

Financial Services Cybersecurity

Threat & Vulnerability Mgmt

Risk Reporting & Dashboards

Tools

AI Research Tools

Dashboards

Scorecards

Briefing Tools

Job description

• Own the cybersecurity risk posture for the assigned business unit, including risk identification, prioritization, mitigation planning, and ongoing control effectiveness


• Translate cyber threats, vulnerabilities, and control gaps into actionable business risk decisions


• Monitor emerging threats and material risk trends to inform risk acceptance, remediation, and investment priorities


• Advise executive leadership on risk tradeoffs, business impacts, and recommended actions


• Embed security guidance into business initiatives, digital transformation efforts, and strategic programs


• Align cybersecurity priorities with business objectives, enterprise standards, and risk appetite


• Lead executive reporting for governance forums, risk committees, and senior leadership


• Present risk trends, control effectiveness, remediation progress, and emerging threats through dashboards, scorecards, and briefings


• Represent cybersecurity priorities in governance forums and drive accountability for timely risk decisions


• Partner with Risk, Compliance, Audit, and Regulatory Relations teams on cybersecurity requirements


• Support internal and external audits, examinations, and regulatory reviews


• Facilitate issue management and remediation activities


• Build relationships across business units, CIO organizations, risk teams, and cybersecurity domains


• Coordinate with security architecture, application security, vulnerability management, identity and access management, and other cyber teams


• Act as an escalation point for significant cyber risks and security concerns


• Drive accountability for security outcomes across business stakeholders


• Use approved AI tools for research, summarization, drafting, analysis, and decision support while applying sound judgment and adhering to privacy, security, data-handling, ethical, and company-policy requirements


• Establish trusted advisor relationships, develop a comprehensive cyber risk profile, improve executive risk visibility, reduce prioritized cyber risks, enhance compliance, and strengthen cross-functional collaboration during the first 12 months

Requirements

• 10+ years of Technology Strategic Leadership experience, or equivalent demonstrated through work experience, training, military experience, or education


• 10+ years of cybersecurity, technology risk, or information security experience, including significant leadership responsibility


• 4+ years of management or leadership experience


• 3+ years in a senior security leadership role such as BISO, CISO, Deputy CISO, or equivalent


• Ability to work outside of normal business hours as needed


• Ability to travel up to 10% of the time


• This role is not eligible for visa sponsorship now or in the future


• This role is not eligible for relocation assistance


• Desired: ability to influence without direct authority and lead cross-functional initiatives in a complex, matrixed environment


• Desired: exceptional executive communication skills and ability to translate complex technical issues into business language


• Desired: comfort operating through ambiguity, quantifying risk concepts, brokering agreement, and managing multiple stakeholder demands


• Desired: financial services cybersecurity experience or comparable highly regulated industry experience


• Desired: deep knowledge of cybersecurity frameworks, technology risk management, regulatory requirements, security governance, incident response, and threat management


• Desired: industry certifications such as CISSP, CISM, CRISC, CISA, or CGEIT


• Desired: experience supporting regulatory examinations


• Desired: experience with enterprise risk management frameworks


• Desired: experience developing executive cybersecurity reporting and metrics

Core Competencies

Demonstrates extensive experience in cybersecurity risk management, including risk identification, mitigation planning, and executive reporting. Possesses strong leadership capabilities in aligning cybersecurity priorities with business objectives and managing cross-functional initiatives.

Highest-signal resume keywords

• Cybersecurity Risk Management


• Executive Communication Skills


• Leadership Experience


• Cybersecurity Frameworks Knowledge


• Regulatory Compliance Experience

ATS Optimization Keywords

Hard Skills

• Risk Identification


• Mitigation Planning


• Control Effectiveness Monitoring


• Incident Response


• Threat Management


• Cybersecurity Governance


• Enterprise Risk Management


• Executive Reporting Development


• Vulnerability Management


• Identity and Access Management

Soft Skills

• Influencing Without Authority


• Comfort Operating Through Ambiguity


• Stakeholder Management


• Cross-Functional Collaboration


• Relationship Building

Certifications & Qualifications

• CISSP


• CISM


• CRISC


• CISA


• CGEIT

Industry Keywords

• Financial Services Cybersecurity


• Highly Regulated Industry Experience


• Technology Risk Management


• Regulatory Requirements


• Cybersecurity Compliance

Tools & Technologies

• AI Tools for Research and Analysis


• Dashboards


• Scorecards


• Briefing Tools