Enterprise Business Information Security Officer

BISO Job Summary

The Business Information Security Officer (BISO) is the information security program owner for their assigned business segment. The BISO is an expert at the company's information security program capabilities such as security policies and technical security solutions. The BISO advises business stakeholders on the company's security protections, customer security requirements, and regulatory security controls with the objective of minimizing the businesses' information risk exposure and achieving secure business enablement.

BISO Duties and Responsibilities

• Engages assigned business as the central point of contact for information security and advocates security control needs of assigned business while also advocating for the company's security initiatives and controls deployment. Stays knowledgeable about the company's technical controls and advocates for the technical security control needed by assigned business and applies knowledge of company's technical control capabilities.
• Promotes corporate security awareness activities and implements security awareness concepts locally for assigned business and customizes communications to be suitable for local language and culture.
• Promotes and evangelizes the company's IT Security Policies and Standards. Advises stakeholders on security deviation control alternatives, such as compensating controls, and supports stakeholders through the policy deviation process.
• Provides security consulting and advice for Mergers & Acquisitions by performing on-site or remote security risk assessments and writing report of findings and recommendations in terms suitable for the business to make informed data and computer security risk decisions.
• Presents monthly security status report for assigned business to stakeholders such as the CISO, CIO(s), CTOs, and IT Managers. Presents executive-level communications regarding the state of security for assigned business.
• Provides security consulting and advice for customer audits, regulatory audit, technical vulnerability assessments (TVAs) and other security-related audits. Reviews and analyzes security components of audit plans and applies knowledge and expertise of IT Security policies and locally deployed security processes and procedures to ensure a successful audit outcome. Provides leadership for remediation activities and assembles necessary resources to ensure successful remediation results.
• Advises stakeholders on incident investigations and champions stakeholders through the security incident process.

BISO Skills - Security Specific and People Skills:

• Experience implementing or managing ISO 21434 certification and/or UN R155/156 compliance.
• Expert in U.S. and international security and privacy regulations such as CMMC, DFARS, HIPAA, CCPA, GDPR, EAR, etc.
• Expert in security industry standards (SIS) and able to apply SIS to unique business and information technology situations. (i.e. ISO-27001, NIST, ITIL Security Management, PCI-DSS, NIS2, TISAX)
• Expert knowledge of customer security requirements and company's obligation for protecting customer information assets in company's care.
• Able to create and implement methodologies to support BISO security consulting and advisory services.
• Able to build positive relationships and rapport with customers and Jabil teams (i.e. Business stakeholders, IT Security Teams, IT Managers/Directors, IT Network Team, Legal Team, etc)
• Develop and manage oversight of IT Expansions and Divestitures

Education & Experience Requirements

• Required: Bachelor's Degree. Prefer a degree in a technical field such as Information Security, Management Information Systems, Computer Science, or Engineering.
• 5+ years of Information security practice
• Preferred: Security Certification: CISM, CISSP, CISA.
• Preferred: 3 plus years successful work experience as a BISO
• Preferred: Experience in the Automotive and/or Healthcare cybersecurity space

BE AWARE OF FRAUD: When applying for a job at Jabil you will be contacted via correspondence through our official job portal with a jabil.com e-mail address; direct phone call from a member of the Jabil team; or direct e-mail with a jabil.com e-mail address. Jabil does not request payments for interviews or at any other point during the hiring process. Jabil will not ask for your personal identifying information such as a social security number, birth certificate, financial institution, driver's license number or passport information over the phone or via e-mail. If you believe you are a victim of identity theft, contact the Federal Bureau of Investigations internet crime hotline ( the Federal Trade Commission identity theft hotline ( and/or your local police department. Any scam job listings should be reported to whatever website it was posted in.

Jabil, including its subsidiaries, is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, age, disability, genetic information, veteran status, or any other characteristic protected by law.

Accessibility Accommodation

If you are a qualified individual with a disability, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Jabil.com/Careers site as a result of your disability. You can request a reasonable accommodation by sending an e-mail to View email address on click.appcast.io or calling View phone number on click.appcast.io with the nature of your request and contact information. Please do not direct any other general employment related questions to this e-mail or phone number. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to.