13 Sep
|
Recruise
|
India
Job: Information Security Engineer – Deputy BISO
Location: Bangalore
: The Information Security Engineer – Deputy BISO will support the Business Information Security Officer (BISO) in managing day-to-day information security engagement with the business. The role will serve as a key security partner to business and technology stakeholders, providing security consultation, risk management support, governance oversight, and coordination across Information Security teams.
Responsibilities
- Serve as the primary point of contact for day-to-day information security engagement with business and technology stakeholders.
- Partner with business leaders to understand strategic priorities, technology initiatives, associated security risks and requirements.
- Provide security consultation and guidance for new projects, applications, technology implementations and business initiatives.
- Ensure security requirements and risk considerations are incorporated early in project, product and technology lifecycles.
- Identify, assess, document, communicate and track information security risks impacting the business.
- Support security risk assessments, risk acceptances, exceptions, remediation plans and risk-based decision making.
- Track security risks, vulnerabilities, findings and remediation activities through appropriate closure and escalation.
- Coordinate with Security Architecture, Application Security, Cloud Security, IAM, Data Security, Vulnerability Management and other security teams to address business security requirements.
- Support execution of BISO governance processes and monitor adherence to applicable security policies, standards and controls.
- Facilitate coordination between business, technology, risk, compliance,
audit and Information Security stakeholders to resolve security issues and dependencies.
- Represent Information Security and the BISO function in relevant business, technology, project and governance forums.
- Maintain BISO security metrics, KPIs, KRIs, risk dashboards and management reporting to provide visibility into the business security posture.
- Identify emerging, systemic or material security risks and ensure timely escalation to the BISO and appropriate leadership.
- Support strategic business, digital transformation, cloud, technology and third-party initiatives by providing risk based security guidance while minimizing unnecessary business friction.
Required Qualifications
- Experience in Information Security, Security Architecture, Security Governance or a related field.
- Experience working with business and technology stakeholders on security requirements and risk decisions.
- Working knowledge of areas such as application security, cloud security, IAM, data protection, vulnerability management, and third-party security.
- Experience supporting security assessments, risk remediation, governance or compliance activities.
- Strong stakeholder management, communication and influencing skills.
- Ability to translate technical security risks into explicit business impact and actionable recommendations.
- Ability to independently manage multiple priorities, stakeholder requests, and security initiatives.
- Knowledge of cybersecurity frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or similar.
- Understanding of regulatory, compliance, and technology risk management requirements.
- Relevant certifications such as CISSP, CISM, CRISC, CCSP, or equivalent are advantageous.
📌 Information Security Engineer – Deputy BISO (India)
🏢 Recruise
📍 India