Business Information Security Officer - AMERICAS

About the Company

Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators, and fintech customers, our world-class terminals, solutions, and services enable the global ecosystem of payments acceptance. With 40 years of experience, innovation is integral to Ingenico’s approach and culture, inspiring our large and diverse community of experts who anticipate and help shape the evolution of commerce worldwide. At Ingenico, trust and sustainability are at the heart of everything we do.

About the Role

The Business Information Security Officer (BISO) will serve as the primary point of contact between the cybersecurity function and their assigned business unit(s)/region. The BISO is responsible for maintaining a strategic relationship with the specific business unit or function that they are aligned to, ensuring that cybersecurity is incorporated into the culture of the organization/business unit.

Responsibilities

• Business Partnership, Advisory & Security Enablement
  • Serve as the cybersecurity SME for regional business stakeholders, translating security policies, standards, and frameworks into business-relevant guidance.
  • Build trusted relationships, influence decision-making through risk-based consultation, and align cybersecurity priorities with business objectives.
  • Promote cybersecurity awareness and foster a strong security culture in partnership with global awareness and training teams.
• Security Risk Management & Governance
  • Conduct security risk assessments for new initiatives, projects, and material technology changes.
  • Advise stakeholders on risks, controls, mitigations, and trade-offs before key decisions.
  • Establish clear risk ownership and accountability, ensuring risks, remediation plans, and exceptions are properly documented, governed, and tracked within enterprise GRC processes.
  • Monitor and escalate emerging regional and business-specific cyber risk.
• Security Integration, Compliance & Control Assurance
  • Act as the regional liaison between business teams and Security Centers of Excellence (Cyber Defense, Security Architecture, Security Risk Management, etc.).
  • Ensure enterprise security standards, operating models, and controls are applied consistently and pragmatically across the region.
  • Validate that regional changes do not introduce compliance, regulatory, or security boundary risks and escalate control deviations as required.
• Planning, Transformation & Stakeholder Engagement
  • Align security funding requirements and risk treatment plans with business and IT priorities.
  • Participate in governance forums, councils, and working groups to represent regional security interests.
  • Ensure security considerations are embedded in regional initiatives, transformations, and technology programs.
• Incident Response, Audit & Regulatory Support
  • Serve as the regional security escalation point during major incidents, coordinating with incident response teams and stakeholders.
  • Support internal, external, customer, and regulatory audits, including evidence collection and remediation tracking.
  • Contribute to accurate communication of the organization's security posture during customer and regulatory engagements.

Requirements

• Bachelor’s degree in business, Technology, Cybersecurity, or a related field.
• 8+ years of experience in cybersecurity risk management, governance, and regulatory compliance, with a focus on business outcomes and service delivery.
• Experience leading and collaborating with global, cross-functional teams.
• Strong knowledge of risk assessments, incident response, and security audits.
• Experience working within regulated environments, including PCI DSS, ISO 27001, and/or NIST Cybersecurity Framework.
• Understanding of cloud security governance, DevOps, and enterprise IT control environments.
• Familiarity with identity and access management (IAM), privileged access management (PAM), vulnerability management, and SOC operating models.
• Proven ability to partner with business leaders and support enterprise-wide initiatives.
• Excellent stakeholder management and communication skills.
• Experience managing and/or partnering with Managed Service Providers (MSPs).
• Comfortable traveling – Regional based role, requiring occasional visits to regional offices.
• Fluency in written and oral English required.

Preferred Qualifications

• Certifications: CISSP, CISM, or CRISC.
• MBAs are an added benefit but not required.