Director of Business Information Security

About the role

As the Director, Business Information Security Officer (BISO) you’ll serve as the senior Information Security leader embedded within assigned AmAPAC regions and Corporate IT environments. This role ensures information and cybersecurity strategies are aligned with business objectives, risks are effectively identified and mitigated, and security is integrated into strategic and operational decision making. Acting as a trusted advisor to executive leadership, the Director, BISO translates technical cyber risks into business impact, strengthens GXO’s security posture, and champions a culture of security across the organization.

Responsibilities

• Serve as the primary Information Security point of contact for designated corporate and regional business functions
• Partner with senior business leaders to integrate Information Security into strategic initiatives, operational planning, and organizational change
• Align Information Security priorities with business objectives and operational realities while securing executive sponsorship
• Identify, assess, communicate, and oversee remediation of cyber and information security risks in collaboration with GRC
• Represent Information Security in customer, supplier, and cross-functional engagements, including incident response and assurance activities

Requirements

• Bachelor’s degree in information security, Cybersecurity, or related field, or equivalent related work or military experience
• Senior-level experience partnering with executive leadership to align information security with business objectives
• Demonstrated experience managing complex, cross-functional, and multi-region security initiatives
• Strong experience engaging customers, vendors, and third parties regarding security posture and assurance
• Proven ability to translate technical security risks into actionable business insight
• Deep knowledge of information and cybersecurity standards, controls, and emerging threats

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CGRC, or equivalent
• Experience supporting customer-facing, regulated, or global operating environments
• Strong commercial, operational, and risk management acumen with exceptional executive communication skills