Business Information Security Officer at Moniepoint Inc.

We are seeking a highly skilled and experienced Business Information Security Officer (BISO) to serve as the primary liaison between the Information Security team and specific business units. The BISO will be responsible for ensuring that the business unit's information security needs are met, aligning security initiatives with business objectives, and promoting a culture of security awareness. The ideal candidate will have a strong background in information security, risk management, and business operations.

Key Responsibilities:

Security Strategy and Integration:

• Develop and implement tailored information security strategies and programs for the business unit.
• Ensure that business unit initiatives align with the overall enterprise security strategy and policies.
• Identify and prioritize security requirements based on business goals and risk assessments.

Risk Management:

• Conduct regular risk assessments and vulnerability analyses specific to the business unit 
• Develop risk mitigation plans and collaborate with the business unit to implement them 
• Monitor and report on the status of risk management activities and risk exposure

Compliance and Governance:

• Ensure that the business unit complies with relevant information security regulations, standards, and policies..
• Assist in audits and assessments related to information security within the business unit.
• Maintain documentation and provide evidence of compliance efforts.

Incident Management:

• Coordinate with the Security Operations Center (SOC) to ensure effective incident detection and response.
• Lead the business unit's response to security incidents and breaches, including investigation and remediation efforts.
• Develop and maintain incident response plans tailored to the business unit

Security Awareness and Training:

• Develop and implement security awareness programs tailored to the business unit.
• Conduct regular training sessions and security drills for business unit employees.
• Promote a culture of security awareness and best practices within the business unit

Collaboration and Communication:

• Serve as the primary point of contact between the Information Security team and the business unit.
• Provide regular updates to business unit leaders on the status of information security initiatives.
• Collaborate with other BISOs and the Information Security team to share insights and best practices.

Continuous Improvement:

• Stay current with the latest cybersecurity trends, threats, and technologies relevant to the business unit.
• Continuously evaluate and improve the business unit’s information security posture.
• Participate in professional development and industry forums to enhance knowledge and skills.

Skills and Qualifications

• Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field. Master’s degree preferred.
• Minimum of 5 years of experience in information security, with at least 2 years in a role involving business unit collaboration.
• Proven experience in developing and implementing information security programs within a business context.
• Relevant certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.
• Strong understanding of information security principles, frameworks, and best practices.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, SIEM, and encryption.
• Knowledge of risk management and compliance requirements in various industries.
• Ability to understand and align with business unit objectives and priorities.
• Strong analytical and problem-solving skills to address security challenges in a business context.
• Excellent communication and interpersonal skills to effectively collaborate with business leaders and stakeholders.