Business Information Security Officer

Deluxe•Minneapolis, MN

12d•$135,000 - $150,000

About The Position

Use your ability to persuade and teach others with seasoned Information Security knowledge as a Business Information Security Officer with Deluxe. In this role you'll be supporting a variety of teams in our shared services group to help ensure we are creating innovative products using secure practices and methodologies. As a Business Information Security Officer at Deluxe, you will play a crucial role in identifying and mitigating cyber risks to our organization’s information assets, systems and resilience programs. We are seeking a strategic thinker with strong collaboration skills, detailed working knowledge of cyber risk management frameworks and best practices, and strong experience performing internal and external risk assessments in a regulated business environment.

Requirements

Bachelor’s Degree in Information Security, Computer Science, Business or similar field
8 years of experience in Compliance frameworks and regulations
Professional certifications such as PCI ISA, CISSP, CISA, CRISC
Must be 18 years of age or older

Nice To Haves

9 years of experience in Compliance frameworks and regulations
Professional certifications such as CISM, CIPP, CDSPE, CCSP, CGEIT.
Excellent analytical, presentation and project management skills
Strong ability to navigate organizationally across multiple functional areas providing work direction on risk activities and governance processes.
Ability to communicate program criticality and negotiate delivery amidst competing priorities.
Strategic and analytical thinking skills, and the ability to execute in a complex, matrixed organization.
Influential and results-driven professional with strong organizational skills, able to prioritize and multitask effectively under pressure and tight deadlines.

Responsibilities

Lead cyber risk assessments and develop mitigation strategies for validated risks.
Guide the development of risk governance frameworks and oversee cyber risk management program-related documentation (methodologies, tools, processes, etc.)
Collaborate with enterprise program teams related to risk themes, lessons learned and other improvement opportunities.
Develop, review and present reports to senior management and stakeholders, effectively communicating the findings and offering strategic insights and actionable recommendations.
Learn IT risk assessment methodologies by staying familiar with industry best practices.
Support policy and procedure development to enhance robust security and compliance.