Principal, Business Information Security Officer; BISO

AVP - Business Information Security Officer (BISO)

Join to apply for the AVP - Business Information Security Officer (BISO) role at LPL Financial
.

The Business Information Security Officer (BISO) plays a crucial role in ensuring the secure evolution of LPL Financial's product portfolio. Aligned with the Product organization, this role integrates cybersecurity into business strategies, mitigating risks across audit findings, self‑reported issues, exceptions, and PTasks while navigating intersections with domains such as AI, Data, and Investor Experience. As a BISO, this individual will drive BCP/DR strategies, manage third‑ and fourth‑party risks in products, and oversee scorecard ownership for security metrics.

They will lead change management and communications efforts for security products impacting advisors, ensuring transparency and engagement among stakeholders. Additionally, this role serves as the CISO’s designated representative in supporting LPL Financial’s product leadership, bridging Info Sec strategy with business objectives while minimizing friction between cybersecurity and the product/technology domains. This is a product‑heavy security leadership role where you'll have direct influence over LPL’s product vision, security posture, and strategic innovation, helping safeguard advisors and their clients while enabling business growth.

• Act as the primary Info Sec liaison for Product, Business, and Technology Leadership, ensuring security integration into product strategies.
• Own and manage security‑related findings, exceptions, and PTasks, aligning them with compliance frameworks and business priorities.
• Drive security‑related change management, ensuring transparent communication with advisors and key stakeholders.
• Provide technical and business guidance on cybersecurity risk, including application security (OWASP), cloud security (AWS/Azure), and IAM principles.
• Facilitate risk‑adjusted security exception management, supporting product leaders in remediation efforts.
• Oversee BCP, DR, and third‑/fourth‑party risk considerations within the product portfolio.
• Collaborate with security and product teams to reduce friction and improve alignment between Info Sec practices and business goals.
• Offer executive‑level reporting on security posture and risk management efforts.

We seek innovative, strategic thinkers who thrive in fast‑paced environments, are highly collaborative, and can translate complex security concepts for executive and non‑executive audiences.

• 5+ years of cybersecurity risk management experience, including identification, synthesis, and remediation strategies.
• Strong knowledge of NIST, OWASP, FFIEC, FINRA, and other industry security frameworks.
• Extensive experience working in a matrix model, supporting both operational and transformational cybersecurity initiatives.
• Executive presence with a proven ability to engage stakeholders, influence decision‑making, and communicate security strategies effectively.
• Technical expertise across cloud security (AWS/Azure), Dev Sec Ops , application security, and secure data‑handling processes.

• Bachelor’s degree in Computer Science, Information Systems, or a related field.
• 7+ years in cybersecurity, risk management, or security program management.
• Strong relationship‑building and cross‑functional collaboration skills.
• Certifications such as CISSP, GIAC, CCSP, or other cloud security credentials.
• Experience in Agile security methodologies and understanding of Software Development Life Cycle (SDLC).

$118,988–$198,313/year
Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play – such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more.

Your recruiter will be happy to discuss all that LPL has to offer!

LPL Financial Holdings Inc. (Nasdaq: LPLA) is…