Business Information Security Officer - GSC - US

Sysco

1d•Remote

About The Position

The Business Information Security Officer (BISO) is a dedicated security professional responsible for balancing risk management and Cybersecurity requirements. This role leads a team of regional Business Information Security Officers and requires strong business acumen, technical expertise, and consultative skills. A critical aspect of this role is understanding business operations to effectively engage with business leaders and stakeholders to enhance the understanding, identification, and management of business risks.

Requirements

10+ years experience of Cybersecurity and or information risk management
Knowledge and understanding of the design of the operational systems and operations environments
Knowledge of the software/firmware installed on operational systems
Understand applications running in the operations environment and the resulting network traffic
In-depth understanding of cybersecurity solutions and requirements within the food and service industry
Excellent communication skills, with an ability to tailor and engage communication across all levels of the organization
Fluency in written and spoken English.

Nice To Haves

Certified Information on Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Information Systems Security Architecture Professional (ISSAP)
Information Systems Security Engineering Professional (ISSEP)
GIAC Response and Industrial Defense (GRID)

Responsibilities

Provide independent and objective oversight and monitoring for the implementation of Cybersecurity across Sysco’s European operating companies.
Direct and manage Security Leads across regions.
Translate Policy(s) and Standards set forth by Cybersecurity Risk and Compliance Management Team into the environment.
Increase awareness and foster accountability for security across the enterprise.
Facilitate bidirectional communication between operations teams globally and enterprise security while advocating for both in a balanced manner.
Escalate risks and exceptions to Cybersecurity Risk and Compliance Management Team and Change Management.
Participate in and assist with security incident readiness and response training & awareness including supporting cybersecurity incident response activities.
Oversee responsibilities for both security and business continuity (governance, reporting, compliance, risk assessments, etc.).