Business Information Security Officer

Job Summary
The Business Information Security Officer (BISO) is the information security program owner for their assigned business segment. The BISO is an expert at The Company’s information security program capabilities such as security policies and technical security solutions.  The BISO advises business stakeholders on the company’s security protections, customer security requirements, and regulatory security controls with the objective of minimizing the businesses’ information risk exposure and achieving secure business enablement.

Responsibilities

• Engages assigned business as the central point of contact for information security and advocates security control needs of assigned business while also advocating for the company’s security initiatives and controls deployment.  Stays knowledgeable about the company’s technical controls and advocates for the technical security control needed by assigned business and applies knowledge of company’s technical control capabilities.
• Promotes corporate security awareness activities and implements security awareness concepts locally for assigned business and customizes communications to be suitable for local language and culture.
• Promotes and evangelizes the company’s IT Security Policies and Standards.  Advises stakeholders on security deviation control alternatives, such as compensating controls, and supports stakeholders through the policy deviation process.
• Provides security consulting and advice for Mergers & Acquisitions by performing on-site or remote security risk assessments and writing report of findings and recommendations in terms suitable for the business to make informed data and computer security risk decisions.
• Presents monthly security status report for assigned business to stakeholders such as the CISO, CIO(s), CTOs, and IT Managers.  Presents executive-level communications regarding the state of security for assigned business.
• Provides security consulting and advice for customer audits, regulatory audit, technical vulnerability assessments (TVAs) and other security-related audits.  Reviews and analyzes security components of audit plans and applies knowledge and expertise of IT Security policies and locally deployed security processes and procedures to ensure a successful audit outcome.  Provides leadership for remediation activities and assembles necessary resources to ensure successful remediation results.
• Advises stakeholders on incident investigations and champions stakeholders through the security incident process.
  

BISO Skills - Security Specific and People Skills

• Expert in U.S. and international security and privacy regulations such as CMMC, DFARS, HIPAA, CCPA, GDPR, etc.)
• Expert in security industry standards (SIS) and able to apply SIS to unique business and information technology situations. (i.e. ISO-27001, NIST, ITIL Security Management, PCI-DSS, NIS2, TISAX)
• Expert knowledge of customer security requirements and company’s obligation for protecting customer information assets in company’s care

• Able to create and implement methodologies to support BISO security consulting and advisory services 
• Able to build positive relationships and rapport with customers and Jabil teams (i.e. Business stakeholders, IT Security Teams, IT Managers/Directors, IT Network Team, Legal Team, etc.)
• Serves as a liaison between Corporate IT, Business leaders, and Information Security organizations, advocating on behalf of each, presenting customers’ needs/requirements to Global Cybersecurity leadership

Leadership Capabilities (People Leader)"M" Career Stream
Develops strategic vision and direction for security teams
Cultivates a culture of continuous improvement and innovation
Empowers managers and staff to take ownership of security outcomes

Education & Experience Requirements

• Required: Bachelor's Degree. Prefer a degree in a technical field such as Information Security, Management Information Systems, Computer Science, or Engineering

• 8+ years of Information security practice or related field and 2 - 3 years experience in a Lead Role

• Preferred: Security Certification: CISM, CISSP, CISA

• Preferred: 3 plus years successful work experience as a BISO

• Preferred: Experience in the Automotive and/or Healthcare cybersecurity space

• Excellent communication skills; written, oral, and presentation

Jabil, including its subsidiaries, is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, age, disability, genetic information, veteran status, or any other characteristic protected by law.

Accessibility Accommodation