Business Information Security Officer (BISO)

Job Title

Business Information Security Officer (BISO)

Job Summary

The BISO is a dedicated security professional that balances risk management and cybersecurity requirements, leading a team of regional Business Information Security Officers. The role requires business acumen, technical acumen and strong consultative skills. Business operational understanding is critical because this role will engage with business leaders and operations stakeholders to enhance understanding, identification, and management of business risks.

Duties and Responsibilities

• Provide independent and objective oversight and monitoring for the implementation of cybersecurity across Sysco’s operating companies.
• Direct and manage Security Leads across regions.
• Translate policy and standards set forth by the Cybersecurity Risk and Compliance Management Team into the environment.
• Increase awareness and foster accountability for security across the enterprise.
• Facilitate bidirectional communication between operations teams globally and enterprise security while advocating for both in a balanced manner.
• Escalate risks and exceptions to the Cybersecurity Risk and Compliance Management Team and Change Management.
• Participate in and assist with security incident readiness and response training and awareness including supporting cybersecurity incident response activities.
• Oversee responsibilities for both security and business continuity (governance, reporting, compliance, risk assessments, etc.).

Education Preferred

• Bachelor’s Degree or higher related to Computer Science, Cybersecurity, Information Technology, or related fields

Experience Required

• 10+ years of cybersecurity and/or information risk management experience
• Knowledge and understanding of the design of operational systems and operations environments
• Knowledge of application and product system development lifecycle and security tooling and appsec protocols
• Understanding of applications running in the operations environment and the resulting network traffic
• In-depth understanding of cybersecurity solutions and requirements within the food and service industry
• Excellent communication skills, with the ability to tailor and engage communication across all levels of the organization

Licenses/Certifications Preferred

• CISSP, CISM, ISSAP, ISSEP, GRID

Language Requirements

• Fluency in written and spoken English

Physical Demands

• Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job

Travel Requirements

• Up to 25% travel

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology and Engineering

Industries

• Information Services, Technology, Information and Media, and Data Infrastructure and Analytics

Note: This description retains core responsibilities and qualifications; extraneous boardroom and job-board boilerplate has been removed to focus on the role specifics.