Business Information Security Officer; BISO; Information System Proj Mgmt

Business Information Security Officer (BISO) (Information System Proj Mgmt
4)

Location: Fairfax, VA, Virginia, United States

Requisition Number:25753

Required Travel: 0 - 10%

Employment Type:

Full Time/Salaried/Exempt

Anticipated Salary Range:$-$

Security Clearance:

Ability to Obtain

Level of

Experience:

Senior

Meet HII’s Mission Technologies Division
Our team of more than 7,000 professionals worldwide delivers all-domain expertise and advanced technologies in service of mission partners across the globe. Mission Technologies is leading the next evolution of national defense – the data evolution – by accelerating a breadth of national security solutions for government and commercial customers. Our capabilities range from C5

ISR, AI and Big Data, cyber operations and synthetic training environments to fleet sustainment, environmental remediation and the largest family of unmanned underwater vehicles in every class. Find the role that’s right for you. Apply today. We look forward to meeting you.

Mission Technologies is seeking a business information security officer (BISO) to work out of our Fairlakes office in Fairfax, VA. The business information security officer (BISO) serves as a trusted cybersecurity advisor to their assigned division. The BISO understands cybersecurity risks and technologies and can effectively communicate them to business units. The BISO works in tandem with the business across multiple services and platforms to address risk, while advising business leaders to ensure they are making decisions with cybersecurity in mind.

The BISO is an advanced role supporting the cybersecurity program. This individual provides leadership, and strategic and tactical guidance for a world-class cybersecurity program supporting enterprise security initiatives. As a business enabler, the BISO is an effective communicator with the technical aptitude to drive cybersecurity fundamentals into aspects of the business.

The BISO must be capable of working closely with senior management, third parties, project managers and business subject matter experts (SMEs). Additionally, the BISO must be personable and able to translate cybersecurity issues to business leader initiatives. The BISO must have a technical background and be able to understand technologies, their purpose, and their security requirements and data protection needs, wherever they reside.

BISOs should also understand threats, as well as risk mitigations and technical controls recommended by security leaders. This role requires both deep security expertise and strong business acumen to enable secure growth, operational resilience, and regulatory compliance

• Serve as a trusted advisor to the division CIO and business unit leadership.
• Act as a liaison to ensure cybersecurity practices are built into business unit initiatives for the entire lifecycle.
• Act as a trusted point of contact across business units.
• Work closely with cybersecurity leadership and division CIO to instill cybersecurity policies and practices throughout business units to address security operations, incident response, application security and infrastructure.
• Be actively informed and engaged in cybersecurity projects across the business.
• Provide disaster recovery and business continuity planning advice when working with the division CIO for business and cybersecurity resiliency.
• Enforce the strong security culture set forth by the division CIO, ensuring uniformity across cybersecurity leadership, business units and employees.
• Foster strong relationships with internal business units and excel in cybersecurity communication.
• Advise business units on enterprise-wide people, process and technology cybersecurity recommendations.
• Maintain up-to-date knowledge related to cybersecurity threats, vulnerabilities and mitigations set forth to reduce the attack surface; circulate this knowledge through the business units.
• Ensure business projects are focused on cybersecurity from the beginning.
• Identify and document threats and vulnerabilities that may impact the business and address them regularly with business units.
• In…