Business Information Security Officer

Job Title: Business Information Security Officer  

Location : Chicago IL (Onsite)

JD
Job Title: Business Information Security Officer Director for Global Information Research  ~ Innovation & Research
The Research area Business Technology Organization (BTO)’s, Business Information Security Officer (BISO) operates as the prime information security partner within Information Security & Risk Management aligning security initiatives with business objectives and ensuring a robust security culture. Tasked with aligning cybersecurity tactics with research-centered goals, managing potential scientific data-related risks, and advancing security across the research organization. This crucial individual contributor role ensures harmonization between the ISRM & Information Research IT Leadership Team, functioning as an intermediary between the research IT teams and the cybersecurity department, offering expert guidance on security risks, compliance, and incident response related to scientific research-focused objectives.

Purpose Statement:
As a Research area Business Information Security Officer (BISO), you secure the organization's scientific research assets through effective alignment of cybersecurity strategies with research goals. By embodying the crucial connection between research departments and the cybersecurity function, the BISO uplifts the organization's security stance through knowledgeable risk management, astute incident response, and inclusive compliance efforts. Utilizing your expertise in project management, data risk assessment, and leadership, you foster a strong security culture, driving scientific innovation securely, minimizing potential cyber threats, thus positioning cybersecurity as a strategic enabler of scientific success and competitive advantage. |

Major Responsibilities:  In your role, you will be responsible for:

Strategic Alignment & Risk Management 

Develop and execute cybersecurity strategies aligning with scientific research objectives and regulatory measures. 

Identify, appraise, and reduce information security risks across research departments, using risk management best practices for scientific data.

Collaborate in the establishment of ISRM, data protection, and privacy norms across the organization. Monitor security procedures effectively, offering guidance in accordance with ISRM policies.

Leadership & Collaboration

Act as information security liaison between research groups, the CISO, and the Information Security and Risk Management (ISRM) teams. 

Establish and lead a BISO Advisory group, promoting collaboration among IT, legal, and risk management teams in a scientific research context.

Define, generate, and present crucial risk KPI’s to business leaders.

Act as a cyber security subject matter expert (SME), coordinating and providing multidisciplinary know-how in security architecture and security management.

Collaborate with IT teams to formulate mitigations for system security threats and risks.

Provide consulting services on current and upcoming projects, covering all layers of IT security architecture.

Incident Response & Crisis Management

Manage incident response efforts, assuring timely detection, classification, and resolution of security incidents in research units.  

Execute post-incident reviews and comprehensive tabletop exercises to improve preparedness.

Compliance & Governance

Ensure research compliance with regulatory measures such as GDPR, HIPAA, CCPA, and adherence to standards like ISO 27001; applicable to scientific data. 

Familiarize with annua audit scoping efforts, coordinating with BTO Compliance teams to identify security activities targeted for review.

Training & Awareness

Design and provide security awareness programs, underlining the importance of cybersecurity in scientific research.

Develop a cybersecurity-conscious culture throughout the scientific research community within the organization.