Business Information Security Officer (Cybersecurity)

Location: Remote within Georgia, Texas, Illinois, and DC, USA

Salary: $180,000–$200,000 annual

Company

Brown & Brown is an insurance organization focused on serving customers through a meritocratic and inclusive culture.

What you will do

• Act as the primary liaison between the security function, divisional profit centers, IT leaders, and business executives.
• Support and continuously improve information and physical security programs, policies, standards, and controls.
• Shape corporate and divisional security roadmaps and guide security-related investment and resource allocation.
• Lead security risk assessments, remediation tracking, exception management, and risk ownership across divisions.
• Support mergers and acquisitions through pre-deal due diligence and post-deal security integration.
• Oversee certification, accreditation, regulatory compliance, data privacy, and security awareness activities.

Requirements

• 8–10+ years of experience in information security, cybersecurity, risk management, governance, physical security, or regulatory compliance.
• Bachelor’s degree in business, security, technology, or a related field.
• Experience leading security teams across mid-to-large organizations, including teams of 55+ people.
• Deep experience with security architecture, security tooling, SOC operations, and cyber incident response.
• Working knowledge of ISO 27001, NIST, Cyber Essentials, and other security standards.
• Ability to evaluate risk in business context and connect security initiatives to business value.

Nice to have

• CISSP, CISM, or equivalent certification.
• Knowledge of Property & Casualty insurance.

Culture & Benefits

• Meritocratic culture that rewards self-starters and customer-focused work.
• Medical, dental, vision, life, and disability insurance.
• ESPP, 401(k), student loan assistance, and tuition reimbursement.
• Mental health and enhanced advocacy services.
• Paid time off, holidays, and preferred partner discounts.