Director, Enterprise Security - Business Information Security Officer (BISO)

The Experience

• Enterprise Security is hiring a Director, Business Information Security Officer (BISO), also called a Security Partner. You are accountable for the security posture of major Enterprise Business Units (BUs) and serve as their primary link to the broader Security organization.
• This is a senior technical leadership role. You read designs, understand the systems, and take clear positions on architecture, controls, and trade-offs with engineers, product leaders, and executives.
• You lead a small team of Security Partners and are the trusted security go-to for your BU’s senior technical and business leaders.
• AI tools help you scale analysis and drafting, so you can focus on judgment and influence.
• This role is based in NYC, NY; SF, CA; Denver, CO; Indianapolis, IN; Dallas, TX; or McLean, VA and is eligible for a hybrid work arrangement.

What You’ll Actually Be Doing

• Own the security relationship for your assigned BU. Represent the customer’s voice inside Enterprise Security and security’s voice inside the customer’s leadership.
• Own the risk register. Set severity, prioritization, and buy-down sequencing, accounting for compensating controls. Route risk-acceptance decisions to the right executive owner.
• Build resourced risk buy-down plans with named owners and dates, hold teams accountable, and escalate when progress stalls.
• Lead security input on design reviews, threat models, and architecture decisions. Shape the software development lifecycle (SDLC), secure-by-design patterns, and platform guardrails early.
• Deliver quarterly reviews, risk narratives, and posture metrics ready for Chief Information Security Officer (CISO), Chief Information Officer (CIO), and Board audiences.
• Bring in security engineers, the Cyber Security Operations Center (CSOC), technical program managers, and other specialists at the right time to drive outcomes the enterprise adopts.
• Track emerging risks in AI and machine learning (ML) systems, such as agentic architectures, prompt injection, and model and training-data governance. Turn them into concrete risk and control decisions.
• Consider compliance and regulatory requirements (such as FedRAMP, Sarbanes-Oxley (SOX), and regional data-protection laws) into your risk view to drive security prioritization, partnering with Legal, Privacy, and Compliance.
• Drive adoption of security tooling, telemetry, and automation so risk decisions rest on data.
• Manage, coach, and grow Security Partner Leads and Senior Leads. Set the operating cadence and the bar for deliverables, and develop successors.
• Use approved AI assistants to produce executive-quality analysis and drafts, and help your team do the same.
• Partner with Enterprise Security leadership on cross-portfolio strategy and enterprise-wide programs.

You’re Our Person If...

• You have 12+ years of experience in cybersecurity engineering, IT risk, or a closely related field, including time in a large, complex enterprise.
• You have served as a BISO, Security Partner, or similar senior security leader accountable for a business unit or product line.
• You have managed and developed security professionals and built high-performing teams.
• You have deep technical knowledge of cloud, identity, application security, and AI/ML risks, and can hold a substantive point of view in design reviews and threat models.
• You know control frameworks such as COSO, NIST Cybersecurity Framework, and NIST SP 800-53, and regulations such as FedRAMP, SOX, and regional data protection.
• You prioritize risk clearly and can explain what is the top risk and what is not worth fixing now, with rationale that holds up to executive scrutiny.
• You have a record of measurably improving security in a business unit or product organization by closing findings, not just reporting them.
• You communicate in writing and speaking at an executive level, including to CISO, CIO, and Board audiences.
• You use sound judgment on when to decide, escalate, or hold the line, and you are comfortable challenging senior leaders.
• You deliver in ambiguous, fast-moving environments and have experience with change events such as mergers and acquisitions (M&A), reorganizations, and product launches.
• You turn data into leadership-ready narrative using reporting and analytics tools.
• You build trust with senior technical and business leaders across distributed, cross-functional teams.
• You are fluent with current AI coding and productivity tools.

Even Better If...

• You hold CISSP, CISA, CISM, or an equivalent certification.
• You have experience in regulated industries such as technology, financial services, public sector, or healthcare.
• You have integrated acquired entities or divestitures into enterprise security programs.
• You have a bachelor’s degree in Computer Science, Engineering, Information Systems, Cyber Security, or a related field, or equivalent experience