Information Security Officer (BISO) - Technology Risk & Vulnerability Management

Risk Assessment & Validation

Partner with core BISOs, Business Asset Owners (BAOs), and Technology Asset Owners (TAOs) to review, update, and complete Technology Asset Risk Assessments (TARAs) to identify inherent risk, and Control Gap Assessments (CGAs) to evaluate residual risk.

Scope & Compliance Governance

Act as the gatekeeper to ensure all active projects stay strictly within the defined scope of the currency uplift mandate. Track control exceptions and ensure strict alignment with corporate security frameworks.

Cross-Functional Collaboration

Serve as the primary liaison between specialized currency teams and the broader US BISO organization. Participate heavily in weekly alignment meetings, project standups, and stakeholder syncs (occupying approximately 50% of the daily schedule).

Vulnerability Tracking & Reporting

Monitor and track the overall success of currency uplifts against key metrics, specifically focusing on the reduction of asset vulnerabilities, control gaps, and End-of-Life/End-of-Support (EOL/EOS) concerns.

Metrics & Dashboards

Compile and deliver weekly tracker reports identifying work completed, project milestones achieved, and risk escalations or concerns.

Nice-to-Have Qualifications

• Industry-standard security certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or equivalent risk/security training.