Business Information Security Officer - Remote/Defense Industrial Base (DIB) Exp

About the role

The Business Information Security Officer (BISO) will play a pivotal role in driving the security strategy at EVOTEK. This position involves developing and executing security initiatives that span technology, process, and culture. The BISO will evolve and expand the existing strategy to ensure that the line of businesses meet and exceed security demands.

Responsibilities

• Develop, drive, and implement a comprehensive client information security program (goals, objectives, and policies).
• Establish a defined, consistent security architecture standard and work with clients to implement technical controls in line with cutting-edge best-in-class security and privacy standards.
• Drive client domestic and international projects to meet emerging cyber security requirements, data protection, and privacy laws.
• Implement approved policies and procedures to ensure information security efforts are properly coordinated and in compliance with reducing overall security risk.
• Maintain compliance with information security policies and procedures, ensuring third-party compliance.
• Oversee client incident response planning, data loss prevention, and breach remediation, serving as the focal point for response delivery.
• Implement ongoing client risk assessment programs targeting information security and privacy matters; recommend methods for vulnerability detection and remediation and perform/vet vulnerability testing.
• Coordinate and deliver information security reporting and assessments as required by regulatory agencies, clients, and management.
• Stay current on the latest security and privacy legislation, regulations, alerts, and vulnerabilities pertaining to the organization.
• Conduct continual research to maintain knowledge of technology, customer needs, and overall requirements.
• Participate in key initiatives and projects to ensure that cybersecurity controls are accounted for early within the project and software development lifecycles.
• Ensure risk assessments are conducted on client high-risk business applications.
• Provide escalation for high-risk issues arising from those assessments.
• Ensure remediation plans are tracked to completion.

Requirements

• Cyber Compliance Assessments & Regulatory Compliance experience specifically NIST 800-171, CMMC and DFARS.
• 10+ years of Cybersecurity experience ideally within the oil industry or Defense Industrial Base Sector, with a background in Security and Compliance.
• Seasoned track record of assessing threat and vulnerability from a business and technical perspective.
• Ability to develop and champion pragmatic security solutions that support business growth.
• Experience developing a strategic, comprehensive enterprise information security and IT risk and privacy management program.
• Experience with supporting customer-facing products, not just internal.
• Ability to create a culture of accountability and security.
• Ability to communicate and engage effectively with a diverse audience, including front-line technical staff, non-technical staff, management, executives, and vendors/providers.
• Self-starter with the ability to lead tasks with demonstrated ability to work independently.

Benefits

• Salary commensurate with years' of experience, technical expertise and geographic location
• Salary range: $150,000 to $190,000
• Performance bonuses
• Benefits package that includes 100% paid medical, dental and vision for the employee
• 401(k) with employer match
• Strong company culture
• Flexible PTO policy
• Flexible working arrangements
• Annual company overnight retreat