Principal Business Information Security Officer

Fifth Third Bank • Cincinnati, OH

4d • Onsite

About The Position

The Principal Business Information Security Officer (BISO) is responsible for assisting the BISO Manager with defining, developing, and leading the Line of Business (LOB) BISO team of Information Security (IS) professionals within the business who provide an additional layer of defense by guiding the LOB to reduce information security risk in business processes through strategic consulting, education, and analysis. Provides consultation and thought leadership to business teams on information security matters based on security expertise, the company's risk tolerance, and information security requirements. Bridges the gap between business leaders and Information Security by providing consultation to business teams on information security matters based on the company's risk tolerance and information security requirements. Consulting is prioritized daily based on the greatest security concerns and current strategic initiatives. Leveraging Information Security policies, standards, and procedures in conjunction with information security expertise, the LOB BISO is a critical resource to assist the LOB with removing business process barriers encountered due to information security requirements. Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank’s risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.

Requirements

• Bachelor’s Degree or equivalent experience.
• Seven years minimum experience, combination business and information security experience.
• Information Security knowledge / expertise.
• Banking industry knowledge or experience.
• Fifth Third Line(s) of Business knowledge or equivalent experience.
• Project management experience.
• Demonstrated analytical aptitude with an emphasis on investigative methodical critical questioning and logical thinking.
• Demonstrated ability to interpret and apply policies and regulations across a large, complex business.
• Demonstrated ability to identify and mitigate information security risks within business processes
• Ability to manage multiple complex priorities while remaining flexible when priorities shift as the LOB BISO program matures.
• Demonstrated high level of interpersonal skills with ability to interact with employees and leaders at multiple levels and be a positive influence during LOB BISO team and stakeholder interactions.

Responsibilities

• Assist leading strategic direction for the Frontline LOB BISO program.
• Help drive Frontline LOB BISO team to prioritize LOB consulting on the greatest information security concerns and strategic initiatives to reduce IS risk.
• Help facilitate LOB BISOs to develop consistent processes to optimize the value add as they advise their respective LOB on relevant information security risks, contribute to the development of risk-reducing measures, and support IS policies and strategic initiatives.
• Work collaboratively with business leaders, risk partners, and other internal groups leaders to balance risk management with business initiatives, regulations, and customer experience.
• Participate in cross-functional groups to challenge current processes, identifying current opportunities for process improvement, efficiency/effectiveness, and consistency to drive continuous improvement in results.
• Facilitate issue research, root cause and trend analysis, and LOB/partner discussions to determine issue resolution or present potential solutions to BISO manager.
• Help drive process improvement for BISO processes and when appropriate facilitate cross functional teams to document and discuss end to end processes.
• Provide indirect leadership by mentoring other BISOs as needed.
• Collaborate with IS on process changes with end user impact; participate in planning and implementation strategy discussions.
• Participate in information security related councils and working groups, as appropriate.
• Influence strategic direction of LOB BISO program to focus on activities that add the most value to LOBs.
• Advocate and socialize the LOB BISO program strategy with all stakeholders.
• Promote Security Awareness communications / activities and educate LOB as appropriate.
• Provide guidance to comply with IS requirements and navigate resulting business process challenges.
• Approve decisions on high risk IS processes such as elevated access (all DLP entitlements) requests based on business justifications.
• Serve as point of contact for information security concerns / risks within LOBs, including insider threat.
• Provide input on IS process changes with end user impact and Enterprise-wide communications prior to implementation / distribution.
• Partner with IS Information Protection on enterprise data protection strategies.
• Reinforce bank wide communication on changes to IS policies / requirements.
• Identify opportunities for Security Awareness training and education.
• Report KRI results, perform trend analysis, and share opportunities for improvement with LOB leaders.
• Drive Phishing and Data Loss Prevention (DLP incident) awareness and accountability in LOBs.
• Provide input to information security related KRIs / metrics that are geared towards the LOBs.
• Provides employees timely, candid and constructive performance feedback, develops employees to their fullest potential by providing challenging opportunities, develops the appropriate talent pool to ensure adequate bench strength and succession planning, and recognizes and rewards employees for accomplishments.

Benefits

• Comprehensive benefits
• Differentiated compensation offerings
• Incentive compensation plan
• Extensive benefits programs designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: Associate degree