Sr Manager, Business Information Security Officer

DXC Technology•Nashville, TN

1d•$165,500 - $307,300

About The Position

DXC Technology is seeking a Senior Manager – Business Information Security Officer (BISO) to support key business units and service lines as the company expands its global cybersecurity program. Representing the Global Chief Information Security Officer, the BISO embeds cybersecurity strategy, governance, and risk management into business operations, strategic initiatives, and service delivery. The role serves as a strategic advisor to business unit leadership, providing oversight and direction on security posture, risk exposure, control effectiveness, and cybersecurity priorities. It partners with business and technology leaders to strengthen security maturity, enable informed risk-based decisions, and integrate cybersecurity into operations while protecting clients, data, services, and DXC’s reputation. DXC describes its work model as prioritizing in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. The stated compensation range is $165,500–$307,300. Full-time hires are eligible for DXC’s benefits program.

Requirements

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related discipline, or equivalent relevant professional experience.
At least 12 years of experience in information security, cybersecurity, cyber risk management, or related technology disciplines.
Significant experience in senior cybersecurity leadership and risk management roles in complex, global, highly regulated environments.
Deep knowledge of cybersecurity threats and security domains, including security controls, vulnerability management, identity and access management, incident response, security architecture, and operational resilience.
Strong understanding of cybersecurity governance, enterprise risk management, regulatory requirements, audit processes, issue management, and Governance, Risk, and Compliance platforms.
Experience with cybersecurity maturity models, risk management methodologies, and frameworks including NIST, ISO 27001, and CIS Controls.
Experience developing and managing metrics-driven cybersecurity programs, including security performance indicators, risk reporting, and control effectiveness assessments.
Ability to influence and advise senior business stakeholders on complex cybersecurity and risk matters, translating technical issues into business impact and practical, risk-based recommendations.
Excellent stakeholder management, communication, presentation, and executive reporting skills.
Ability to work effectively in fast-paced, complex, matrixed environments and collaborate across business functions, technology teams, and geographies.

Nice To Haves

Advanced degree.
Experience building, scaling, or maturing cybersecurity programs across multiple business units or global regions.

Responsibilities

Advise business unit leadership on emerging cyber threats, security posture, control effectiveness, and operational resilience.
Partner with Global Cybersecurity leadership to align business unit practices with enterprise security strategies, policies, standards, and threat intelligence.
Establish and lead business unit cybersecurity governance, including security health reporting, risk reviews, and executive updates.
Promote cybersecurity as a business enabler supporting secure growth, innovation, operational resilience, and client trust.
Oversee the business unit cybersecurity risk register and ensure material risks, control gaps, vulnerabilities, and emerging threats are identified, assessed, prioritized, and managed.
Drive remediation of high-priority cybersecurity risks and control deficiencies with technology, engineering, architecture, and operational stakeholders.
Oversee cybersecurity hygiene controls and their effectiveness, ensuring alignment with enterprise requirements and business operations.
Translate technical security findings, threat intelligence, and control weaknesses into business impacts, risk assessments, and actionable leadership recommendations.
Partner with security architecture and cyber engineering teams to embed baseline controls into products, services, technology changes, and transformation initiatives.
Engage early in business strategy, transformation, and delivery initiatives to identify security requirements and address potential risks.
Act as the senior cybersecurity contact for audits, regulatory examinations, corporate security reviews, and control assessments.
Oversee audit readiness, including supporting evidence, management responses, and timely remediation of security findings.
Monitor compliance with enterprise cybersecurity standards, regulatory requirements, and applicable control frameworks.
Engage with clients and external stakeholders as needed to communicate DXC’s cybersecurity posture, control environment, resilience capabilities, and risk management practices.