Vice President, Business Information Security Office (BISO) & Cyber Security Risk

Location: Alpharetta, Georgia, United States

Company

hirify.global provides scientific and professional information and technology services.

What you will do

• Lead and develop a team of BISOs and cyber risk professionals supporting business units across the organization.
• Define the BISO and cyber risk operating model, engagement standards, coverage allocation, budget, headcount, and vendor relationships.
• Serve as the senior security partner for an assigned business unit and advise executive, product, and technology leaders.
• Own the cyber and technology risk management framework, taxonomy, risk appetite, assessments, treatment plans, risk acceptance, and escalation processes.
• Oversee security assessments across applications, infrastructure, cloud, data, and third parties, driving remediation to closure.
• Set security metrics and report risk posture, control effectiveness, and treatment progress to executive leadership.

Requirements

• 15+ years of IT security and/or cyber risk experience.
• 8+ years of management or leadership experience managing security and/or risk teams.
• Extensive BISO, security leadership, or comparable senior security experience with accountability for enterprise risk outcomes.
• Experience with cloud and application security, secure SDLC, threat modeling, API security, security tooling, vulnerability management, and incident response.
• Deep experience with enterprise cyber risk frameworks, risk registers, risk appetite, risk treatment, third-party risk, and control gap analysis.
• BS in Engineering, Computer Science, or equivalent experience required; at least one relevant certification such as CISSP, CISM, CRISC, SANS, GIAC, ethical hacking, penetration testing, or security risk assessment certification is required.

Culture & Benefits

• Annual incentive bonus eligibility.
• Country-specific benefits are provided based on location.
• Reasonable accommodations are available throughout the hiring process.