Information Security Business Partner

About the role

The Information Security Business Partner (ISBP) will serve as the critical link between ZS’s client-facing business teams and both ZS’s and client’s Information Security organizations, driving alignment of client, business, and regulatory security requirements.

This role is ideal for a dynamic professional with deep information security experience in a multinational or consulting environment, any client facing experience, who enjoys collaborating with diverse stakeholders to deliver secure business solutions and measurable cybersecurity outcomes.

The candidate should have client facing Information Security experience.

• Business Unit Security Risk Assessment:
  Conduct periodic security risk reviews for business units or projects, facilitate risk sessions, and deliver tailored reporting.
• Security Requirements Mapping:
  Advise business teams in translating client regulatory and contractual security requirements into actionable controls, policies, and technical processes.
• Liaison for Client CISO/Info Sec Needs:
  Act as primary contact to coordinate security requests, assessments, audits, and due diligence with client CISOs and Info Sec teams.
• Policy & Standard Guidance:
  Interpret internal/external security policies, support alignment with business practices, and provide guidance on exceptions and clarifications.
• Incident & Business Impact Coordination:
  Support response and escalation for security incidents, including impact analysis for affected business units.
• Security Maturity & Compliance Reporting:
  Prepare and communicate security KPIs and maturity dashboards; facilitate reporting on progress against security program objectives.

• Build and maintain strong working relationships across Business, IT, and Information Security functions, representing client and business priorities within security programs.
• Working with executive teams - CISOs, CDLs, CIOs & proficient in translating security language into business language.
• Strong relationships with Privacy & Legal teams. Strong presentation skills and able to deliver for executive level presentations.
• Participate in the planning and execution of account-level Information Security initiatives, supporting compliance, audit, and regulatory requirements.
• Drive security capability improvement, including architecture/design, awareness, and readiness activities.
• Contribute to cyber resilience and incident response planning as applicable.
• Share practical knowledge of relevant cybersecurity policies, frameworks, and regulatory environments, especially those impacting healthcare or pharma sectors.
• Provide periodic updates to leadership and stakeholders on security posture, status, and roadmap progress.

• Bachelor’s degree in computer science, Information Security, or related field.
• 10+ years of experience delivering security consulting, risk assessments, or business information security functions in large organizations.
• Proven expertise in risk management, security frameworks (NIST, ISO 27001, CIS, COBIT), and interpreting regulatory requirements.
• Strong verbal/written communication skills, with the ability to translate technical concepts for business audiences and coordinate with client stakeholders.
• Demonstrated experience building consensus among cross-functional teams.
• Commitment to high standards of ethics, regulatory compliance, and customer service.
• Experience with in multinational, consulting, or healthcare/pharma organizations.
• Practical understanding of security controls in cloud platforms and distributed environments.
• Professional security certifications (CISSP, CISA, CISM, CRISC, Security+).
• Familiarity with endpoint, network, and application security architectures.
• Hands‑on experience with project management or leading small teams.
• Fluency in English.
• Client‑first mentality.
• Intense work ethic.
• Collaborative spirit and problem‑solving approach.

• Cross‑functional skills development & custom learning pathways.
• Milestone training programs aligned to career progression opportunities.
• Internal mobility paths that empower growth via s‑curves, individual contribution and role expansions.