Information Security Engineer – Deputy BISO

Job: Information Security Engineer – Deputy BISO

 Location: Bangalore

Job description: The Information Security Engineer – Deputy BISO will support the Business Information Security Officer (BISO) in managing day-to-day information security engagement with the business. The role will serve as a key security partner to business and technology stakeholders, providing security consultation, risk management support, governance oversight, and coordination across Information Security teams.

 

Responsibilities:

• Serve as the primary point of contact for day-to-day information security engagement with business and technology stakeholders.

• Partner with business leaders to understand strategic priorities, technology initiatives, associated security risks and requirements.

• Provide security consultation and guidance for new projects, applications, technology implementations and business initiatives.

• Ensure security requirements and risk considerations are incorporated early in project, product and technology lifecycles.

• Identify, assess, document, communicate and track information security risks impacting the business.

• Support security risk assessments, risk acceptances, exceptions, remediation plans and risk-based decision making.

• Track security risks, vulnerabilities, findings and remediation activities through appropriate closure and escalation.

• Coordinate with Security Architecture, Application Security, Cloud Security, IAM, Data Security, Vulnerability Management and other security teams to address business security requirements.

• Support execution of BISO governance processes and monitor adherence to applicable security policies, standards and controls.

• Facilitate coordination between business, technology, risk, compliance, audit and Information Security stakeholders to resolve security issues and dependencies.

• Represent Information Security and the BISO function in relevant business, technology, project and governance forums.

• Maintain BISO security metrics, KPIs, KRIs, risk dashboards and management reporting to provide visibility into the business security posture.

• Identify emerging, systemic or material security risks and ensure timely escalation to the BISO and appropriate leadership.

• Support strategic business, digital transformation, cloud, technology and third-party initiatives by providing risk based security guidance while minimizing unnecessary business friction.

 

 

 

Required Qualifications:

• Experience in Information Security, Security Architecture, Security Governance or a related field.

• Experience working with business and technology stakeholders on security requirements and risk decisions.

• Working knowledge of areas such as application security, cloud security, IAM, data protection, vulnerability management, and third-party security.

• Experience supporting security assessments, risk remediation, governance or compliance activities.

• Strong stakeholder management, communication and influencing skills.

• Ability to translate technical security risks into clear business impact and actionable recommendations.

 • Ability to independently manage multiple priorities, stakeholder requests, and security initiatives.

• Knowledge of cybersecurity frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or similar.

• Understanding of regulatory, compliance, and technology risk management requirements.

 • Relevant certifications such as CISSP, CISM, CRISC, CCSP, or equivalent are advantageous.