Business Information Security Associate

Business Information Security Associate

Location: Fully Remote

Contract Length: 12+ Months

Role Description

The Business Information Security Associate (BISA) is an Information Security point of contact supporting the Global Business Information Security Office for an assigned segment, driving the cybersecurity program. The BISA serves as a trusted partner and point of contact, providing cybersecurity best practices, advice, and assurance that the Information Security policy is complied with for processes and systems.

Role Requirements

• Support activities of the Global Business Information Security Office, acting as a security contact for IT leaders, product owners, infrastructure, architecture, people org, finance, legal, and other personnel.
• Partner with business, compliance, privacy, legal, and IT resources to enhance the effectiveness of the security program.
• Partner with the segment BISO to implement policies and standards for the segment.
• Supports risk remediation activities along with the Information Risk team.
• Supports Information Security Awareness programs by participating in events, communications, training, and other educational activities.
• Escalates issues to the appropriate Information Security teams, assisting with investigations as needed.
• Serve as liaison with the service delivery teams to deliver required solutions for the segment.
• Proactively educate regional DIO team members on information security best practices.
• Enforce data protection policies and IT Controls within the segment.
• Attend Information Security Town Halls, BISO org standups, Information Risk calls, and specified leadership discussions.
• Track and maintain KPIs, including but not limited to:
  • Phishing
  • Patching
  • Training
  • Risk mitigation