Business Information Security Officer

Allegis Global Solutions•Hanover, MD

3d•$112,500 - $170,000•Remote

About The Position

The BISO’s primary responsibility is to ensure that Allegis Global Solutions, Inc.’s (AGS) information security and data privacy initiatives support the global business strategy while complying with industry best practices, cybersecurity frameworks, such as NIST Cybersecurity (CSF) and Privacy Frameworks and ISO27001, and in alignment with the parent company’s policies and standards. In conjunction with the Head of Global Information Security of Allegis Group, Inc., the parent company, the AGS BISO will provide vision and leadership for developing and supporting information security and data privacy initiatives in a ‘federated’ environment (at an operating company level in concert with a shared services corporate model) and will oversee and direct the implementation of controls designed to protect the confidentiality, integrity and availability of the data that AGS processes internally and on behalf of its customers. This individual is also responsible for evaluating, auditing and making recommendations regarding existing business operations and systems, protecting against security and privacy breaches and vulnerabilities, while directing the administration and education of security policies, activities and standards. Information security and data privacy functions align to the Risk Team managed by the AGS Global Director of Risk and Compliance.

Requirements

University degree in the field of cybersecurity, information services or business administration, Master’s in one these fields preferred.
Certifications such as CISSP, CISM, Security +, CySA+, ITIL v3 and other information security or data privacy-related preferred, but not required.
3- 5 years’ experience involved in or managing an IS team and/or security operations team.
7-10 years’ experience working in the IS industry or business operations.
Experience in planning and executing security policies and standards development.
Considerable knowledge of business theory, business processes, management, budgeting and business office operations.
Detailed knowledge of technology efforts regarding IS internal controls, risk management, information security, legal, contractual and litigation concerns.
Good understanding of computer systems characteristics, features and integration capabilities.
Experience with common security certifications and frameworks such as SOC2 Type II, ISO27001, CMMC and NIST.
Knowledge of applicable global data privacy and security regulations.
Ability to provide coaching and mentoring to team members in the areas of technical skills & competencies.
In-depth knowledge of applicable laws and regulations as they relate to security and privacy.
Proven leadership ability.
Ability to set and manage priorities judiciously and independently.
Excellent written and oral communication skills.
Excellent interpersonal skills.
Strong negotiating skills.
Ability to present ideas in business-friendly and user-friendly language.
Exceptionally self-motivated and directed.
Superior analytical, evaluative and problem-solving abilities.
Exceptional service orientation.
Ability to motivate in a team-oriented, collaborative environment.

Nice To Haves

Master’s in cybersecurity, information services or business administration.
Certifications such as CISSP, CISM, Security +, CySA+, ITIL v3 and other information security or data privacy-related.

Responsibilities

On an ongoing basis, evaluate the information security and data privacy posture for AGS and provide a regular update to the Global Director of Risk and Compliance as well as make recommendations for future state to address evolving business needs and minimize risk to the organization.
Participate as a member of the global enterprise risk team in governance processes of the organization’s security and privacy strategies.
Recommend and implement changes in security and data privacy policies and practices in accordance with changes in local, federal or international regulation.
Develop and communicate security and privacy strategies and plans to executive team, staff, partners, customers and stakeholders.
Remain informed on trends and issues in the security industry, including current and emerging technologies. Advise, counsel and educate executive and leadership teams on their relative importance and financial impact.
Act as advocate and primary liaison for AGS’ security vision via regular written and in-person communications with executives, leadership and end users.
Participate in customer and vendor contract review/negotiations on information security and data privacy. Provide training and guidance in conjunction with the legal department on these topics periodically.
Supervise recruitment, development, retention and organization of security and privacy staff in accordance with AGS budgetary objectives and personnel policies.
Oversee responses to customer security questionnaires and liaise with AGS program teams and customers, as needed.
Oversee the AGS Security Incident Response Process (SIRP) and ensure alignment with the Allegis Group Information Security team.
In coordination with a third-party auditor, oversee security certification audits such as SOC1/SOC2 Type II and ensure controls are working effectively.
Work closely with Allegis Group IS and Information Security on corporate technology development to fully secure information, computer, network and processing systems.
Review, educate and enforce information security policies.
Ensure that facilities, premises and equipment of the corporate headquarters as well as local and global remote offices adhere to all applicable laws and regulations.
In conjunction with Allegis Group IS, Information Security and independently as needed, providing resolution to security problems in a cost-effective manner.
Promote and oversee strategic security relationships between internal resources and external entities including government, vendors and partner organizations.
Coordinate associated activities with employee/contractor end of assignment/de-provisioning project solutions.