Director of Business Risk Management

A company is looking for a Director - GRC Business Risk Liaison (BISO). Key Responsibilities: Act as the main point of contact for information security within assigned business units, ensuring alignment with enterprise security policies and risk management strategies Develop and implement security programs tailored to the specific needs of business operations, in collaboration with corporate security teams Assess and manage information security risks, working actively with stakeholders to mitigate potential threats Required Qualifications: Doctorate degree and 4 years of information security or risk management experience, or a Master's degree and 8 years, or a Bachelor's degree and 10 years of relevant experience At least 4 years of experience directly managing people and/or leading teams or projects Industry certifications such as CISM, CompTIA Security, or CISSP are preferred Solid understanding of cybersecurity frameworks, including NIST and ISO 27001 Experience with regulatory compliance requirements such as GDPR or HIPAA

Mar 27, 2025 - 18:08
 0
Director of Business Risk Management
A company is looking for a Director - GRC Business Risk Liaison (BISO). Key Responsibilities: Act as the main point of contact for information security within assigned business units, ensuring alignment with enterprise security policies and risk management strategies Develop and implement security programs tailored to the specific needs of business operations, in collaboration with corporate security teams Assess and manage information security risks, working actively with stakeholders to mitigate potential threats Required Qualifications: Doctorate degree and 4 years of information security or risk management experience, or a Master's degree and 8 years, or a Bachelor's degree and 10 years of relevant experience At least 4 years of experience directly managing people and/or leading teams or projects Industry certifications such as CISM, CompTIA Security, or CISSP are preferred Solid understanding of cybersecurity frameworks, including NIST and ISO 27001 Experience with regulatory compliance requirements such as GDPR or HIPAA