Business Information Security Officer - AMERICAS

INGENICO
Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators and fintech customers our world-class terminals, solutions and services enable the global ecosystem of payments acceptance.

WELCOME TO
INGENICO Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators and fintech customers our world-class terminals, solutions and services enable the global ecosystem of payments acceptance. With 40 years of experience, innovation is integral to Ingenico’s approach and culture, inspiring our large and diverse community of experts who anticipate and help shape the evolution of commerce worldwide.

At Ingenico, trust and sustainability are at the heart of everything we do.

About The Role & Team The Business Information Security Officer (BISO) will serve as the primary point of contact between the cybersecurity function and their assigned business unit(s)/region. The BISO is responsible for maintaining a strategic relationship with the specific business unit or function that they are aligned to. This role is in place to ensure that cybersecurity is incorporated into the culture of the organization/business unit in question.

What You’ll Do
Business Partnership, Advisory & Security Enablement

• Serve as the cybersecurity SME for regional business stakeholders, translating security policies, standards, and frameworks into business-relevant guidance.
• Build trusted relationships, influence decision-making through risk-based consultation, and align cybersecurity priorities with business objectives.
• Promote cybersecurity awareness and foster a strong security culture in partnership with global awareness and training teams.

• Conduct security risk assessments for new initiatives, projects, and material technology changes.
• Advise stakeholders on risks, controls, mitigations, and trade-offs before key decisions.
• Establish clear risk ownership and accountability, ensuring risks, remediation plans, and exceptions are properly documented, governed, and tracked within enterprise GRC processes.
• Monitor and escalate emerging regional and business-specific cyber risk

• Act as the regional liaison between business teams and Security Centers of Excellence (Cyber Defense, Security Architecture, Security Risk Management, etc.).
• Ensure enterprise security standards, operating models, and controls are applied consistently and pragmatically across the region.
• Validate that regional changes do not introduce compliance, regulatory, or security boundary risks and escalate control deviations as required.

• Align security funding requirements and risk treatment plans with business and IT priorities.
• Participate in governance forums, councils, and working groups to represent regional security interests.
• Ensure security considerations are embedded in regional initiatives, transformations, and technology programs.

• Serve as the regional security escalation point during major incidents, coordinating with incident response teams and stakeholders.
• Support internal, external, customer, and regulatory audits, including evidence collection and remediation tracking.
• Contribute to accurate communication of the organization's security posture during customer and regulatory engagements.

• Bachelor’s degree in business, Technology, Cybersecurity, or a related field.
• 8+ years of experience in cybersecurity risk management, governance, and regulatory compliance, with a…