Business Information Security Officer

Parsons Corporation

1d•$125,100 - $225,200

About The Position

Parsons is looking for a talented Business Information Security Office (BISO) to join our growing team! In this role, you will serve as the senior information security partner within designated business units, aligning cybersecurity strategies with organizational goals and managing risks to foster a strong security culture. You will act as a critical bridge between the cybersecurity team and business IT initiatives, providing expert guidance on security risks and best practices, collaborating with diverse stakeholders, and leveraging your project management, data analytics, and leadership skills. Your focus will be to ensure that cybersecurity is integrated as a strategic enabler of business success and competitive advantage, rather than just a technical requirement. Ultimately the Business Information Security Officer will cultivate a cybersecurity-conscious culture throughout all levels of the business.

Requirements

Bachelor’s Degree and 10+ years of experience in Information Security, Cybersecurity, or a related field; or master’s degree and 9 years of experience, Additional years of experience can count in lieu of a degree, and vice versa.
Prior, demonstrable experience as a senior information security executive
Demonstration of experience in the consultative role of liaising and advising executive & key stakeholders on security matters
Experience designing and implementing global security solutions.
Deep knowledge of information security management frameworks (ISO 27001, NIST CSF) and regulatory compliance requirements.
Proven ability to communicate effectively with a wide range of stakeholders, including executives and technical teams.
Strong project management, data analytics, problem-solving, and leadership skills.
Possession of CISSP, CISM, CRISC, CISA certifications, or at least two of these credentials.

Nice To Haves

Advanced degree in a related field.
Experience with contract and vendor negotiations.
Expertise in cybersecurity risk management, including conducting assessments and recommending solutions.
Prior experience as a Chief Information Security Officer (CISO) of a medium or large enterprises

Responsibilities

Develop and execute cybersecurity strategies that align with business objectives and regulatory requirements.
Identify, assess, and mitigate information security risks across business units, utilizing risk management frameworks.
Serve as the primary liaison between business units, the CISO, and the Information Security and Risk Management (ISRM) team.
Establish and lead a BISO Advisory capability, facilitating collaboration among IT, legal, and risk management representatives.
Coordinate incident response efforts, ensuring swift engagement during a security incident.
Conduct post-incident reviews and comprehensive tabletop exercises to enhance preparedness.
Design and deliver security awareness programs, emphasizing the importance of cybersecurity within business operations.