Business Information Security Officer

Allegis Global Solutions•Hanover, MD

2d•Remote

About The Position

The Business Information Security Officer (BISO) is primarily responsible for ensuring that Allegis Global Solutions, Inc.’s (AGS) information security and data privacy initiatives align with the global business strategy. This role ensures compliance with industry best practices, cybersecurity frameworks (such as NIST Cybersecurity (CSF), Privacy Frameworks, and ISO27001), and the parent company’s policies and standards. In collaboration with the Head of Global Information Security of Allegis Group, Inc., the BISO will lead and support information security and data privacy initiatives within a federated environment. This includes overseeing and directing the implementation of controls to protect the confidentiality, integrity, and availability of data processed by AGS, both internally and for customers. The BISO is also tasked with evaluating, auditing, and recommending improvements for existing business operations and systems, safeguarding against security and privacy breaches, and directing the administration and education of security policies, activities, and standards. The information security and data privacy functions report to the Risk Team managed by the AGS Global Director of Risk and Compliance.

Requirements

University degree in cybersecurity, information services, or business administration.
3-5 years of experience involved in or managing an IS team and/or security operations team.
7-10 years of experience working in the IS industry or business operations.
Experience in planning and executing security policies and standards development.
Considerable knowledge of business theory, business processes, management, budgeting, and business office operations.
Detailed knowledge of technology efforts regarding IS internal controls, risk management, information security, legal, contractual, and litigation concerns.
Good understanding of computer systems characteristics, features, and integration capabilities.
Experience with common security certifications and frameworks such as SOC2 Type II, ISO27001, CMMC, and NIST.
Knowledge of applicable global data privacy and security regulations.
Ability to provide coaching and mentoring to team members in technical skills and competencies.
In-depth knowledge of applicable laws and regulations as they relate to security and privacy.
Proven leadership ability.
Ability to set and manage priorities judiciously and independently.
Excellent written and oral communication skills.
Excellent interpersonal skills.
Strong negotiating skills.
Ability to present ideas in business-friendly and user-friendly language.
Exceptionally self-motivated and directed.
Superior analytical, evaluative, and problem-solving abilities.
Exceptional service orientation.
Ability to motivate in a team-oriented, collaborative environment.
Alignment with AGS Core Values: Commitment to Excellence, Open Communication, Relationships, Serving Others, Customer Service, Building Relationships, Business Knowledge / Organizational Acumen, Initiative and Drive, Leading Self and Others.

Nice To Haves

Master’s degree in cybersecurity, information services, or business administration.
Certifications such as CISSP, CISM, Security +, CySA+, ITIL v3, and other information security or data privacy-related certifications.

Responsibilities

Evaluate the information security and data privacy posture for AGS and provide regular updates and recommendations to the Global Director of Risk and Compliance.
Participate in the organization’s security and privacy strategy governance processes as a member of the global enterprise risk team.
Recommend and implement changes in security and data privacy policies and practices in accordance with regulatory changes.
Develop and communicate security and privacy strategies and plans to executive team, staff, partners, customers, and stakeholders.
Stay informed on trends and issues in the security industry, including current and emerging technologies.
Advise, counsel, and educate executive and leadership teams on the importance and financial impact of security and privacy matters.
Act as an advocate and primary liaison for AGS’ security vision through regular communications with executives, leadership, and end users.
Participate in customer and vendor contract reviews and negotiations concerning information security and data privacy.
Provide training and guidance on security and privacy topics in conjunction with the legal department.
Supervise the recruitment, development, and retention of security and privacy staff.
Oversee responses to customer security questionnaires and liaise with AGS program teams and customers.
Oversee the AGS Security Incident Response Process (SIRP) and ensure alignment with the Allegis Group Information Security team.
Oversee security certification audits (e.g., SOC1/SOC2 Type II) in coordination with a third-party auditor.
Work closely with Allegis Group IS and Information Security on corporate technology development to secure information, computer, network, and processing systems.
Review, educate, and enforce information security policies.
Ensure that facilities, premises, and equipment adhere to all applicable laws and regulations.
Provide resolution to security problems in a cost-effective manner, in conjunction with Allegis Group IS and Information Security, and independently as needed.
Promote and oversee strategic security relationships with internal resources and external entities.
Coordinate activities related to employee/contractor end-of-assignment/de-provisioning project solutions.