Business Information Security Officer

Parsons Corporation•USA VA (Virtual Office), VA

2d•$125,100 - $225,200

About The Position

The Business Information Security Officer (BISO) serves as the senior information security partner for specific business units. The role aligns cybersecurity strategies with business objectives, manages information security risks, and fosters a robust security culture. Acting as a bridge between the cybersecurity function and business IT initiatives, the BISO provides expert guidance on security risks and best practices and helps make cybersecurity a strategic enabler of business success. The BISO collaborates with stakeholders across the organization, including business units, the CISO, and the Information Security and Risk Management (ISRM) team. The role also coordinates incident response and preparedness activities, develops security awareness programs, and leads a BISO Advisory capability. This position is part of Parsons’ Corporate team.

Requirements

Bachelor’s degree and at least 10 years of experience in Information Security, Cybersecurity, or a related field; or a master’s degree and at least 9 years of experience.
Prior demonstrable experience as a senior information security executive.
Demonstrable experience advising executives and key stakeholders on security matters in a consultative role.
Experience designing and implementing global security solutions.
Deep knowledge of information security management frameworks, including ISO 27001 and NIST CSF, and regulatory compliance requirements.
Ability to communicate effectively with a wide range of stakeholders, including executives and technical teams.
Strong project management, data analytics, problem-solving, and leadership skills.
CISSP, CISM, CRISC, or CISA certification, or possession of at least two of these credentials.

Nice To Haves

Advanced degree in a related field.
Experience with contract and vendor negotiations.
Expertise in cybersecurity risk management, including conducting assessments and recommending solutions.
Prior experience as a Chief Information Security Officer (CISO) of a medium or large enterprise.

Responsibilities

Develop and execute cybersecurity strategies aligned with business objectives and regulatory requirements.
Identify, assess, and mitigate information security risks across business units using risk management frameworks.
Serve as the primary liaison between business units, the CISO, and the Information Security and Risk Management (ISRM) team.
Establish and lead a BISO Advisory capability, facilitating collaboration among IT, legal, and risk management representatives.
Coordinate incident response efforts and ensure swift engagement during security incidents.
Conduct post-incident reviews and comprehensive tabletop exercises to improve preparedness.
Design and deliver security awareness programs that emphasize cybersecurity in business operations.