Business Information Security Leader – Commercial

Responsibilities

• Serve as the senior security advisor to the assigned business‑aligned STS leadership team.
• Partner across all departments and teams globally within the assigned business unit.
• Align security priorities with STS business strategy, digital roadmaps, and regulatory requirements.
• Embed security‑by‑design principles into portfolio planning, demand intake and product development processes.
• Inform Information Security priorities with STS product team strategy & goals.
• Represent security requirements in portfolio governance forums.
• Provide senior level accountability for the business unit security strategy, ensuring consistent direction, prioritization, and alignment with company wide objectives while maintaining strong partnership with the CISO.
• Maintain visibility into the aggregated cyber risk posture of the assigned business unit.
• Ensure risk assessments are conducted, partnering with the Risk Management function, for new and materially changed technologies.
• Serve as a security risk advisor to business‑aligned STS leadership, provide mitigation and remediation guidance, track and highlight risk treatment plans progress.
• Provide formal risk posture reporting to STS leadership on a defined cadence.
• Escalate roadblocks inhibiting timely mitigation or closure of risks.
• Prevent unmanaged technology risk proliferation.
• Exercise senior decision authority for cybersecurity and technology risk matters within the Business Unit, including oversight of risk acceptance, escalation to enterprise forums, and long‑term risk posture considerations.

• broad understanding of technologies and security strategies
• effective communication to all levels within the organization