Business Information Security Officer

Title: Business Information Security Officer

Location: Washington, DC /Remote Eligible

Security Clearance: Moderate Background Investigation (MBI)

Schedule: Due to the nature of law enforcement work and operation, position may require occasional support outside of core working hours, as well as intermittent weekend support, mission dependent

Salary: $128,000/Annual

About KACE:

When you make the decision to join KACE, you are choosing to work alongside talented professionals that have one thing in common; the passion to make a difference! KACE employees bring their diverse talents and experiences to work on critical projects that help shape the nation's safety, security, and quality of life. The desire to have a career that is purposeful and forward thinking is woven into every KACE employee...it's The KACE Way. KACE employees are; purpose driven, forward focused, open-minded, trustworthy, and invested. The KACE Way is our commitment to our employees, to our customers, and to our communities. Join KACE and make a difference!

Job Summary:

The Business Information Security Officer (BISO) will support the Cyber & Investigative Technology Group by advancing and monitoring technology-based solutions, mitigating cyber risks, and working with stakeholders to meet mission goals.

Essential Functions and Responsibilities:

• Aptitude for understanding internal organizational environments and their relationship to the external business environment.
• Understanding of how business initiatives create value and risk for organizations.
• Able to effectively analyze risk within the context of business problems.
• Strong ability to convey complex information risk and security issues in a manner that is easily understood and actionable and constructively challenges prevailing thoughts and processes.
• Ability to translate technical risks into business terms for senior stakeholders and non-technical leaders.
• Experience partnering with IT, Cloud, and Business Units to embed security in strategic initiatives.
• Adept at understanding business focus and processes and ability to inject cybersecurity into those areas through teamwork and influence.
• Able to consistently, effectively defend ideas and solutions.
• Strong problem-solving and trouble-shooting skills.
• Accessibility and ability to interface with and build credibility and relationships with all stakeholders.
• Is a confident, energetic self-starter, with strong communication skills.
• Good judgment, a sense of urgency and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity.

Included, but not limited to:

• Serving as the primary liaison between business units, cloud engineering, IT, and Cyber Security.
• Build relationships with division business units to deliver security by design controls incorporated into projects, architecture, infrastructure and applications.
• Act as a subject matter expert (SME) between cybersecurity and the lines of business in the development of appropriate policies, standards, and frameworks .
• Continuously monitor trends to anticipate and plan for future impact of cyber risk on a specific business unit (BU) or function .
• Follow all risk remediation protocols to ensure issues are mitigated, risks are accounted for, and exceptions are tracked in accordance with frameworks, policies and standards set by the organization .
• Participate in cybersecurity and business-related councils or working groups as necessary .
• Educate stakeholders on cybersecurity-related matters to increase awareness and improve culture .
• Develop an understanding of business goals and reframe risk discussions in business terms.
• Constructively engage business partners regarding cybersecurity issues.
• Establish risk ownership and accountability within the business line.
• Inform business partners of the risk implications of critical decisions by combining empirical analysis with expert judgment to assess business decisions.
• Reshape business partners' preconceived notions of success where appropriate.
• Complete and deliver all assignments and work products in a timely manner.

Minimum Qualifications & Skills:

• Bachelor's degree from an accredited college or university. Significant work experience may be substituted for the education requirement.
• Substantial demonstrated work experience (ideally a minimum of 5 to 8 years) in risk management, governance, and regulatory requirements related to cybersecurity with a specific focus on business outcomes and service delivery.
• Experience in working with and preferably leading a global, cross functional team.
• CISSP or CISM Certifications encouraged but not required.

Clearance:

Applicants selected may be subject to a government background investigation and may be required to meet the following conditions of employment.

Security Requirements/Background Investigation Requirements:

• Must be a U.S Citizen or Legal Permanent Resident.
• Favorable credit check for all cleared positions
• Successfully passing a background investigation including drug screening.

Physical Requirements/Working Conditions:

• Standing/Walking/Mobility: Must have mobility to attend meetings with other managers and employees.
• Climbing/Stooping/Kneeling: 10% of the time.
• Lifting/Pulling/Pushing: 10%
• Fingering/Grasping/Feeling: Must be able to write, type, and use a telephone system 100% of the time.
• Sitting: Sitting for prolonged and extended periods of time.

This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned. Management may revise duties as necessary without updating this job description.

For more information about the company please visit our website at www.kacecompany.com

KACE is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, disability or any other federal, state or local protected class.

KACE complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities.

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to recruiting@kacecompany.com .