VP, BISO - Dow Jones

News Corp • New York, NY

21d • $200,000 - $250,000 • Hybrid

About The Position

The VP BISO of Cyber Security is the primary point of contact for an assigned business unit and supports implementation of the Global Cybersecurity program. Acting as a trusted advisor, the role gathers business requirements and risk information and provides guidance and oversight to help ensure compliance with required policies. The position combines business acumen and technical knowledge to improve the business unit’s security posture while partnering with its leadership.

The role develops an understanding of key assets and processes, identifies and evaluates risks and controls, and recommends additional controls or risk mitigation strategies where appropriate. It also monitors and reports on risks and documented exceptions and helps ensure compliance with Security Policies and Standards. The position is based in New York City and follows a hybrid schedule with three days per week in the office.

Requirements

• Minimum of 13–18 years of professional work experience.
• Bachelor’s degree in Technology, Legal, Computer Science/Engineering, Cybersecurity, or a related field, or equivalent experience.
• Strong understanding of security compliance, policy management, security frameworks such as NIST, and regulations.
• Solid foundation in security architectures and cloud computing environments.
• Excellent oral and written communication skills, including the ability to communicate effectively across all organizational levels and with customers.
• Excellent problem-solving, critical-thinking, and analytical abilities.
• Comfort working in matrixed organizations.

Nice To Haves

• International work experience or experience working as part of a globally dispersed team.
• CISSP or CRISC certification; not required, but highly preferred.

Responsibilities

• Develop and maintain an in-depth understanding of business unit processes, critical assets, physical locations, systems, technologies, data, customers, and partners.
• Oversee PCI, SOX, and ISO 27001 initiatives; support internal technology audits and Privacy initiatives related to GDPR and CCPA.
• Oversee client assurance initiatives, including customer questionnaire responses, customer meetings and audits, and support for Legal in reviewing customer contracts.
• Understand business unit strategy and roadmaps to ensure security is incorporated at appropriate control points.
• Act as the primary local security contact and adviser for technology, news, legal, finance, audit, compliance, and product leadership.
• Run monthly Cyber Risk Steering Committees and quarterly CEO briefings for the assigned business unit, covering risks, threats, program maturity, and projects.
• Lead development of a security strategy specific to the business unit.
• Drive implementation of Security Policies and Standards across the assigned business unit.
• Proactively identify non-compliance and improvement opportunities, and facilitate the development and deployment of standard solutions.
• Provide regular, timely reporting on cybersecurity status across the business unit.
• Engage with the Incident Response Team and provide an escalation path for security issues, incidents, and inquiries.
• Work with Cyber Defense, Product Security Engineering, and Enterprise Security teams to drive program maturity.

Benefits

• Comprehensive and competitive benefits package covering health, retirement, and wellbeing, with optional benefits to meet employees’ diverse needs.
• Bonus eligibility for eligible roles.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior