Business Information Security Officer

Tempe, Arizona, United States Of America

Chandler, Arizona, United States Of America

Full time

JR-024857

At Avnet, relationships matter. We are a global, FORTUNE ® 500 technology distributor and solutions company that delivers design, supply chain and logistics expertise to customers at every stage of a product’s lifecycle. Our employees have a front row seat to the latest innovations shaping the world we live in and the future we share. We’re driven to help our customers around the world succeed and we do so by earning the trust of some of the biggest names in technology.

Working at Avnet means being a part of a global team. We work collaboratively and with integrity, doing business the right way. For more than a century, we have partnered together to help our customers, suppliers and teammates realize the transformative possibilities of technology. Experience what’s next at Avnet!

The Business Information Security Officer (BISO) is a critical enabler of cybersecurity across Avnet’s global business operations. Acting as the unified bridge between enterprise cybersecurity governance and Avnet’s diverse business units, the BISO ensures that security, compliance, and risk management practices are consistently aligned with enterprise IT strategy while remaining responsive to the distinct needs of each business segment.

This role provides embedded, business-facing security leadership—translating cybersecurity policy, risk posture, and strategic priorities into actionable, contextual guidance that supports operational decision-making, revenue growth, and risk reduction.

• Serve as the primary point of contact for each business unit’s security needs.

• Consolidate, triage, and prioritize security requests, projects, and operational issues.

• Ensure all business areas receive consistent, equitable, and timely security support.

• Apply standardized assessment methodologies to evaluate system risk.

• Recommend right-sized security controls based on operational context and regulatory requirements.

• Prevent over- or under-engineering of controls, reducing friction for business teams.

• Translate complex technical risks into clear business-impact language for executives.

• Communicate risk in terms of operational disruption, financial exposure, customer trust, and compliance.

• Develop corrective action plans, compensating controls, and risk acceptances for issues including vulnerabilities, supplier risks, audit findings, and system gaps.

• Establish recurring governance touchpoints within each business unit.

• Provide transparency into security posture, risk hot spots, and upcoming compliance obligations.

• Drive accountability for remediation and adherence to enterprise guardrails.

• Surface business-unit-specific risks and needs to enterprise cybersecurity leadership.

• Ensure emerging issues are not siloed or overlooked, improving enterprise-wide prioritization.

• Support business units in meeting vulnerability remediation SLAs.

• Help teams understand the business impact of exposures and coordinate remediation with IT Ops and Engineering.

• Promote and monitor adoption of secure configuration baselines across all systems.

• Provide security expertise for customer-facing functions such as supply chain solutions, design services, and digital platforms.

• Support sales cycles, customer trust discussions, and contract/audit responses.

• Position…