Business Information Security Officer

About the role

Jabil is looking for a Business Information Security Officer (BISO) who acts as the information security program owner for an assigned business segment. The BISO is an expert in the company's security policies and technical security solutions and advises business stakeholders on security protections, customer security requirements and regulatory controls, with the aim of minimizing information risk and enabling secure business operations.

Key responsibilities

• Serve as the central point of contact for information security for the assigned business, advocating both its security needs and the company's security initiatives.
• Promote corporate security awareness, adapt it to the local language and culture, and promote IT security policies and standards.
• Advise stakeholders on security deviation controls such as compensating controls and support them through the policy deviation process.
• Provide security consulting for M&A, including on-site or remote risk assessments and reports of findings and recommendations.
• Present monthly security status reports and executive-level updates to stakeholders such as the CISO, CIOs, CTOs and IT managers.
• Support customer audits, regulatory audits, technical vulnerability assessments and other security audits, and lead remediation efforts.
• Advise on incident investigations and champion stakeholders through the security incident process.

Required profile

• Bachelor's degree; a degree in Information Security, MIS, Computer Science or Engineering is preferred.
• 8+ years of information security practice or a related field, with 2-3 years in a lead role.
• Preferred: 3+ years of successful experience as a BISO.
• Preferred: experience in automotive and/or healthcare cybersecurity.
• Preferred: CISM, CISSP or CISAP certification.

Required skills

• Expertise in U.S. and international security and privacy regulations such as CMMC, DFARS, HIPAA, CCPA and GDPR.
• Knowledge of security standards such as ISO-27001, NIST, ITIL Security Management, PCI-DSS, NIS2 and TISAX.
• Able to create and implement methodologies supporting BISO consulting and advisory services.
• Strong written, oral and presentation skills, and the ability to build relationships with customers, IT teams, legal and business stakeholders.