Sr Manager Business Information Security Officer

DXC Technology•Washington, DC

2d•$165,500 - $307,300•Hybrid

About The Position

The Sr Manager Business Information Security Officer serves as a trusted cyber security advisor to business unit leadership and partners with Global Cyber Security to align business-unit practices with enterprise standards, policies, and threat intelligence. The role leads business-unit cyber health reporting and risk reviews, communicates security posture to leadership, and promotes cyber security as an enabler of growth, innovation, operational resilience, and client trust. The position oversees the business-unit cyber risk register and drives remediation of high-priority risks and security issues alongside technology, engineering, architecture, and operations stakeholders. It oversees cyber hygiene controls and compliance assessments, translates technical findings into business impact and recommendations, and works with architecture and engineering teams to incorporate baseline security controls into products, services, technology changes, and transformation initiatives. The role engages early in strategy, change, and delivery forums to identify security requirements. The role is the senior point of contact for cyber-related audits, regulatory examinations, corporate security reviews, and control assessments. It oversees audit evidence, management responses, and remediation of findings, and engages clients and external stakeholders on the company's security posture, controls, resilience, and risk management practices. The position requires a bachelor's degree in a relevant discipline or equivalent professional experience, with an advanced degree preferred, and at least 12 years of experience in information security, cyber risk management, or related technology domains. It calls for senior cyber security leadership and risk management experience in complex, highly regulated environments, broad knowledge of security domains and regulatory expectations, experience with security frameworks and maturity models, and the ability to influence stakeholders and communicate technical risks in business terms. The stated compensation range is $165,500–$307,300. DXC's work model prioritizes in-person collaboration while offering flexibility.

Requirements

Bachelor's degree in computer science, information security, cybersecurity, or a related discipline, or equivalent professional experience.
At least 12 years of experience in information security, cyber risk management, or related technology domains.
Senior-level experience in cyber security leadership and cyber risk management within complex, highly regulated environments.
Deep knowledge of cyber threats, security controls, vulnerability management, identity and access management, incident response, security architecture, and operational resilience.
Strong understanding of cyber risk governance, regulatory expectations, audit engagement, issue management, and GRC tools and platforms.
Demonstrated experience with security program maturity models, control frameworks such as NIST, ISO 27001, and CIS Controls, and metrics-driven security management.
Ability to influence and advise the business on complex security and risk matters with clarity and credibility.
Excellent written and verbal communication skills.
Ability to translate technical cyber issues into business impact and risk-based recommendations.
Ability to operate effectively in fast-paced, complex, matrix environments with multiple stakeholders.
Track record of building and scaling security programs across multiple business units or geographies.

Nice To Haves

Advanced degree.

Responsibilities

Advise business unit leadership on cyber threats, control effectiveness, resilience priorities, and overall security posture.
Partner with Global Cyber Security to align with enterprise security standards, policies, and emerging threat intelligence.
Establish and lead business-unit cyber health reporting, risk reviews, and updates for business unit leadership and global cyber security.
Promote cyber security as an enabler of safe growth, innovation, operational resilience, and client trust.
Oversee the business-unit cyber risk register and ensure material risks, control gaps, and vulnerability themes are identified, assessed, prioritized, and managed.
Drive remediation of high-priority cyber risks and security issues with technology, engineering, architecture, and operational stakeholders.
Oversee cyber hygiene control implementation and ensure its effectiveness and alignment of compliance assessments with business operations.
Translate technical findings, threat intelligence, and control concerns into business impact and actionable recommendations for leadership.
Partner with security architecture and cyber engineering teams to build DXC baseline security controls into products, services, technology changes, and transformation initiatives.
Engage early in business strategy, change, and delivery forums to identify cyber security requirements.
Serve as the senior point of contact for cyber-related audits, regulatory examinations, corporate security reviews, and control assessments.
Oversee audit-ready evidence, management responses, and remediation of security findings in line with cyber quality program standards and regulatory expectations.
Engage clients and external stakeholders as required on the company's cyber security posture, control environment, resilience capabilities, and risk management practices.