[Hiring] Business Information Security Officer @Allegis Global Solutions

Role Description

The BISO’s primary responsibility is to ensure that Allegis Global Solutions, Inc.’s (AGS) information security and data privacy initiatives support the global business strategy while complying with industry best practices, cybersecurity frameworks, such as NIST Cybersecurity (CSF) and Privacy Frameworks and ISO27001, and in alignment with the parent company’s policies and standards. In conjunction with the Head of Global Information Security of Allegis Group, Inc., the AGS BISO will provide vision and leadership for developing and supporting information security and data privacy initiatives in a ‘federated’ environment and will oversee and direct the implementation of controls designed to protect the confidentiality, integrity and availability of the data that AGS processes internally and on behalf of its customers. This individual is also responsible for evaluating, auditing and making recommendations regarding existing business operations and systems, protecting against security and privacy breaches and vulnerabilities, while directing the administration and education of security policies, activities and standards.

Key Responsibilities:

• Strategy & Planning:
  • Evaluate the information security and data privacy posture for AGS and provide regular updates to the Global Director of Risk and Compliance.
  • Participate as a member of the global enterprise risk team in governance processes of the organization’s security and privacy strategies.
  • Recommend and implement changes in security and data privacy policies and practices in accordance with changes in local, federal or international regulation.
  • Develop and communicate security and privacy strategies and plans to executive team, staff, partners, customers and stakeholders.
  • Remain informed on trends and issues in the security industry, including current and emerging technologies.
• Operational Management:
  • Act as advocate and primary liaison for AGS’ security vision via regular written and in-person communications with executives, leadership and end users.
  • Participate in customer and vendor contract review/negotiations on information security and data privacy.
  • Supervise recruitment, development, retention and organization of security and privacy staff.
  • Oversee responses to customer security questionnaires and liaise with AGS program teams and customers.
  • Oversee the AGS Security Incident Response Process (SIRP) and ensure alignment with the Allegis Group Information Security team.
  • Coordinate with a third-party auditor for security certification audits such as SOC1/SOC2 Type II.
  • Work closely with Allegis Group IS and Information Security on corporate technology development.
  • Review, educate and enforce information security policies.
  • Ensure compliance with applicable laws and regulations for facilities and equipment.
  • Provide resolution to security problems in a cost-effective manner.
  • Promote and oversee strategic security relationships between internal resources and external entities.
  • Coordinate activities with employee/contractor end of assignment/de-provisioning project solutions.

Qualifications

• University degree in the field of cybersecurity, information services or business administration; Master’s preferred.
• Certifications such as CISSP, CISM, Security +, CySA+, ITIL v3 preferred, but not required.
• 3-5 years’ experience involved in or managing an IS team and/or security operations team.
• 7-10 years’ experience working in the IS industry or business operations.
• Experience in planning and executing security policies and standards development.
• Considerable knowledge of business theory, business processes, management, budgeting and business office operations.
• Detailed knowledge of technology efforts regarding IS internal controls, risk management, information security, legal, contractual and litigation concerns.
• Good understanding of computer systems characteristics, features and integration capabilities.
• Experience with common security certifications and frameworks such as SOC2 Type II, ISO27001, CMMC and NIST.
• Knowledge of applicable global data privacy and security regulations.
• Ability to provide coaching and mentoring to team members in technical skills & competencies.
• In-depth knowledge of applicable laws and regulations as they relate to security and privacy.
• Proven leadership ability.
• Ability to set and manage priorities judiciously and independently.
• Excellent written and oral communication skills.
• Excellent interpersonal skills.
• Strong negotiating skills.
• Ability to present ideas in business-friendly and user-friendly language.
• Exceptionally self-motivated and directed.
• Superior analytical, evaluative and problem-solving abilities.
• Exceptional service orientation.
• Ability to motivate in a team-oriented, collaborative environment.

Benefits

• Medical, dental, & vision.
• 401(k)/Roth.
• Insurance (Basic/Supplemental Life & AD&D).
• Short and long term disability.
• Health & Dependent Care Spending Accounts (HSA & DCFSA).
• Transportation benefits.
• Employee Assistance Program.
• Tuition assistance.
• Time off/Leave (PTO, primary caregiver/parental leave).

Company Description

Working at Allegis Global Solutions (AGS) is more than just a job. It’s a career. It’s a community of people who invest in your development and empower you to blaze your own trail. Each of us is here to create real, measurable impact that moves needles. We operate beyond "roles" or "jobs" to realize the opportunity to make meaningful contributions to a bigger idea.

At AGS, we help companies all over the world transform their people into a competitive advantage. It’s not about filling seats. It’s about designing workforces to meet missions and unleash the most transformative power in business today: The power of human enterprise.

With services around the globe, we have a point of view on the future of work that enables us to be a transformative partner in the way work gets done for our clients’ organizations.

See what it’s like to work at AGS by searching #LifeAtAGS on any social network.