Business Information Security Officer at Moniepoint Inc.

About the Role

• We are seeking a highly skilled and experienced Business Information Security Officer (BISO) to serve as the primary liaison between the Information Security team and specific business units.
• The BISO will be responsible for ensuring that the business unit's information security needs are met, aligning security initiatives with business objectives, and promoting a culture of security awareness.
• The ideal candidate will have a strong background in information security, risk management, and business operations.

Key Responsibilities
Security Strategy and Integration:

• Develop and implement tailored information security strategies and programs for the business unit.
• Ensure that business unit initiatives align with the overall enterprise security strategy and policies.
• Identify and prioritize security requirements based on business goals and risk assessments.

Risk Management:

• Conduct regular risk assessments and vulnerability analyses specific to the business unit
• Develop risk mitigation plans and collaborate with the business unit to implement them
• Monitor and report on the status of risk management activities and risk exposure

Compliance and Governance:

• Ensure that the business unit complies with relevant information security regulations, standards, and policies..
• Assist in audits and assessments related to information security within the business unit.
• Maintain documentation and provide evidence of compliance efforts.

Incident Management:

• Coordinate with the Security Operations Center (SOC) to ensure effective incident detection and response.
• Lead the business unit's response to security incidents and breaches, including investigation and remediation efforts.
• Develop and maintain incident response plans tailored to the business unit

Security Awareness and Training:

• Develop and implement security awareness programs tailored to the business unit.
• Conduct regular training sessions and security drills for business unit employees.
• Promote a culture of security awareness and best practices within the business unit

Collaboration and Communication:

• Serve as the primary point of contact between the Information Security team and the business unit.
• Provide regular updates to business unit leaders on the status of information security initiatives.
• Collaborate with other BISOs and the Information Security team to share insights and best practices.

Continuous Improvement:

• Stay current with the latest cybersecurity trends, threats, and technologies relevant to the business unit.
• Continuously evaluate and improve the business unit’s information security posture.
• Participate in professional development and industry forums to enhance knowledge and skills.

Skills and Qualifications

• Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field. Master’s degree preferred.
• Minimum of 5 years of experience in information security, with at least 2 years in a role involving business unit collaboration.
• Proven experience in developing and implementing information security programs within a business context.
• Relevant certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.
• Strong understanding of information security principles, frameworks, and best practices.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, SIEM, and encryption.
• Knowledge of risk management and compliance requirements in various industries.
• Ability to understand and align with business unit objectives and priorities.
• Strong analytical and problem-solving skills to address security challenges in a business context.
• Excellent communication and interpersonal skills to effectively collaborate with business leaders and stakeholders.