Business Information Security Officer

Role: Business Information Security Officer (BISO)

Location:

About the role:

The BISO is responsible for ensuring all security risks, compliance management pertaining to business delivery and client engagements are managed end to end. Primarily a business facing responsibility, work with business delivery leaders for a specific LOB/BU   on a regular basis to identify, analyze and mitigate security, compliance risks.  This role is also acting as a primary touch point, integration between CISO team and business team, while supporting business on client’s security and compliance requirements.

R͏oles & Responsibilities

• Provide Information security risks, compliance services based on Industry best practices standards such as ISO27001, NIST, SOC, PCI and SOX
• Establish, communicate, and maintain charter, and security plan for overall security and risk management function for the engagements and BU
• Ensure adherence to client contractual requirements for Information security risks, compliance services
• Align and integrate Information security risks and controls for the engagement with customer goals
• Facilitate regular security risk assessments to identify risks, gauge compliance with contractual security obligations and drive continuous security improvements.
• Work with service line leaders in CISO organization to monitor, evaluate comprehensive security measures to protect against threats to security, privacy of client sensitive information for BU
• Provide consolidate dashboard metrics to business leaders, CISO organization on a regular basis
• Establish periodic connection with different service line team within CISO organization
• Prevent data leaks with a focus on client sensitive information, work with Data protection team for security measures
• Owner of Security incident management within engagements, BU. Work with different teams to manage Incident management lifecycle and closure.
• Own security awareness within the BU and engagements
• Review security exceptions for engagements and identify risks. Develop and monitor mitigation plans

K͏ey Qualifications

• Bachelor’s degree in computer science or relevant field
• Relevant work experience of 12-15 years
• Security certifications such as CISSP, CISM, CISA, CRISC, CCSK desired
• Proven experience in Information Security and risk management, especially with Technology risks, IT audit, Compliance needs in large enterprises
• Strong experience in understanding and deployment of ISO27001, NIST
• Experience of SOC 2, PCI DSS assessment and ISMS  control implementation
• Strong understanding of DLP, e-discovery, Data flow mapping and processes
• In depth understanding of network and system security technologies and practices across networks, firewalls, IDS / IPS, Secure cloud environment
• Excellent written, verbal communication and strong organization skills, fluency in oral and written English
• Strong collaboration skills and willingness to be a team player to solve problems and incorporate inputs from various teams, sources.
• Independent thinking and willingness to take reasonable and calculated risks
   

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions. 

Applications from people with disabilities are explicitly welcome.