New

Business Information Security Officer (BISO)

Spectraforce Technologies
United States, New Jersey, Mount Laurel
Jul 16, 2026
Title: Business Information Security Officer (BISO) Location: Mount Laurel, NJ 08054 - 2 days in office - Potential of 4 days down the road Duration: 12 months - Possible of extension Candidate profile details: Degree/Level of Education: Associate degree in technology Certifications Required: No - but CISSP or CISM or similar industry certification/training would be nice to have Years of Overall Experience: 5 + in Info Sec How will performance be measured: No Preferred/Ideal Candidate Background: Info sec exp application currency focus SUMMARY OF THE ROLE: Business Information Security Officer (BISO) in support of the Currency Factory for US applications. A dedicated resource is required to support Currency Factory activities, including oversight of currency uplifts (updating of applications and their infrastructure off of end of support tools, infrastructure, solutions), validation of TARAs and CGAs, tracking control exceptions, and ensuring applications meet clients standards and the scope of the Currency Factory. This role also provides critical reporting and visibility to the U.S. GR&C team, enabling proactive identification of out-of-compliance assets and supporting overall portfolio alignment. Typical Day-to-Day Responsibilities Attending meetings / standups to identify scope of "Currency Factory Work" Working with application assigned BISO to review assessments TARAs and CGAs Update those assessments (working with BISO, the BAO and TAO) to complete. Ensure that project stays within defined scope of Currency Factory Work Report to both BISO teams and Currency Teams to keep both informed Participate in multiple meetins weekly - with uplift projects, with the Currency Factory Team, and the US BISO Team. Weekly tracker and reporting to be done to identify work completed, concerns identified. Track overall success of Currency Uplifts against reducing asset vulnerabilities, control gap assessments and End of Live/Support concerns ++ TARA - Technology Asset Risk Assessment - identifies inherent risk - down with tech owner CGA - Control Gap Assessment - identifies residual risk - done with business owner BAO = Business Asset Owner - TAO = Technology Asset Owner How much time is being spent in meetings : 50% of the time in meetings Who are they interacting with (internal/external) Internal MUST-HAVE Hard Skills: 1.) Info Sec 5yrs 2.) Archer 3.) ServiceNow 4.) Risk assessments 5.) Risk technology Framework 6.) 1B line of defense NICE-TO-HAVE** 1.) CISSP \ CISM or similar industry certification/training