Business Information Security Officer; BISO

Role:
Business Information Security Officer (BISO)

Location:
Mount Laurel, New Jersey

Duration: 12 Months - Extension possibly

Business Information Security Officer (BISO) in support of the Currency Factory for US applications.

A dedicated resource is required to support Currency Factory activities, including oversight of currency uplifts (updating of applications and their infrastructure off of end of support tools, infrastructure, solutions), validation of TARAs and CGAs, tracking control exceptions, and ensuring applications meet the Bank standards and the scope of the Currency Factory. This role also provides critical reporting and visibility to the U.S. GR&C team, enabling proactive identification of out-of-compliance assets and supporting overall portfolio alignment.

• Attending meetings / standups to identify scope of "Currency Factory Work"
• Working with application assigned BISO to review assessments TARAs and CGAs**
• Update those assessments (working with BISO, the BAO and TAO) to complete.
• Ensure that project stays within defined scope of Currency Factory Work
• Report to both BISO teams and Currency Teams to keep both informed
• Participate in multiple meetins weekly - with uplift projects, with the Currency Factory Team, and the US BISO Team.
  Weekly tracker and reporting to be done to identify work completed, concerns identified.
• Track overall success of Currency Uplifts against reducing asset vulnerabilities, control gap assessments and End of Live/Support concerns

++ TARA
- Technology Asset Risk Assessment - identifies inherent risk - down with tech owner

CGA
- Control Gap Assessment - identifies residual risk - done with business owner

BAO = Business Asset Owner - TAO = Technology Asset Owner

• 1.) Info Sec 5yrs
• 2.) Archer
• 3.) Service Now
• 4.) Risk assessments
• 5.) Risk technology Framework
• 6.) 1B line of defense

• CISSP CISM or similar industry certification/training