Vacancy expired!
Job Description
Job Title: BISO, Emerging MarketsLocation: Dallas/Plano, TXStatus: Full-time RoleOur client, a global leader in SaaS and Data Analytics, is looking to add a new role to their Cybersecurity team - BISO of Emerging Markets. In this role you will be asked to holistically look at the Emerging Markets business units and be the eyes and ears of the corporate Information Security organization. This will require an understanding the risks, rules, and regulations that affect the various lines of business and ability to act as a point person for all things Information Security in those groups. On a daily basis you will a) ensure that coverage exists for Emerging Markets capabilities, b) identify gaps when they exist and raise appropriate risks, c) assist the Emerging Market team with remediation plan creation and execution when applicable, and d) provide executive reporting of risk status to CISO, EVP of Emerging Markets, and other business leaders as appropriate.Responsibilities will include:- Report to the CISO and directly support (e.g. "dotted line) the Executive Vice President of Emerging Markets.
- Serve as an Information Security subject matter expert and participate in the development, implementation, and maintenance of information security for Emerging Markets
- Partner with leadership to govern information security and risk posture of the Emerging Markets organization.
- Contribute to the ongoing information security initiatives and improvements development, implementation and maintenance of information security for Emerging Markets
- Provide leadership with risk managed remediation plans to address identified risk in Emerging Markets capabilities.Ensure effective reporting and risk managed remediation actions occur.
- Assess/manage third party/supply chain risk that may impact secure deployment of IoT capabilities.
- Build and maintain effective relationship with RealPage business stakeholders within not only technical teams but business units as well.
- Deliver targeted security and risk communications (verbal and written) to business leadership
- Advise stakeholders on how to achieve the relevant controls and assist with solutions to support them.
- Ensure that processes are documented and communicated in language that is relevant and understandable to non-technical audiences as well as to be implementable by technical teams.
- Ensure compliance with policies and laws
- Any other duties relating to the remit of a role of this standing as required by the needs of the business.
- Bachelor's degree and minimum 5 years of experience in Information Security, Information Assurance and/or Cybersecurity space. Relevant experience and professional certifications may be considered in lieu of a degree.
- Experience in the information security field designing and implementing enterprise security solutions.
- Understanding of common software and system security vulnerabilities and methods of exploitation to include memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, access control weaknesses.
- Excellent verbal and written communication skills with a wide range of audiences including technologists, executives, business stakeholders and IT team members.
- Must be a critical thinker with strong problem-solving skills.
- High level of personal integrity, and the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity.
- High degree of initiative, dependability, and ability to work with little supervision.
- Ability to think at systems / architecture level I.e. How do all the parts of the solution fit together not just design at element level.
- Interest and predisposition to learn new systems and technologies.
- 1-2 years of risk management experience or direct participation in risk management processes, including application risk classification and application control assessments.
- Advanced degree in applicable field
- Prior experience as a Business Information Security Officer (BISO)
- Cyber security risk management experience, e.g. conducting assessments, identifying risks, and recommending solutions.
- Expertise with NIST and ISO 27000 series, particularly NIST SP 800-53, NIST SP 800-171, ISO 27001/2.
Vacancy expired!