Product Security BISO (Business Information Security Officer)

Quick Facts

• Role: Business Information Security Officer (BISO) for Product Security (multiple levels)
• Focus: Product security across SaaS and on-prem services

Description

This role leads product security within the security organization, securing customer data and product assets while balancing risk and overall security posture. You will manage stakeholder expectations and business risk across business units and prioritize, optimize, and track execution of the security backlog for product engineering. The position requires deep expertise in application security, cloud security, secure coding, and security architecture, along with strong executive communication.

Responsibilities

• Drive security initiatives with product and engineering teams to achieve risk outcomes and maintain customer trust
• Own stakeholder management and business risk expectations for business units
• Prioritize and track execution of the product engineering security backlog via a single work stream
• Translate complex security topics into business-friendly language for executives and cross-functional teams

Requirements

• 10+ years of information security experience; 5–10 years in a leadership role focused on technical security across cloud, infrastructure, applications, and third-party integrations
• Deep understanding of security principles across cloud platforms (AWS, Azure, GCP)
• Competence in infrastructure security (network, endpoint, IAM)
• Competence in application security (SAST, DAST, secure coding)
• Familiarity with third-party risk management frameworks
• Familiarity with security tools such as Splunk (SIEM), vulnerability scanners (Qualys or Nessus), and/or IAM solutions (Okta or SailPoint)
• Ability to work independently and take ownership of security initiatives with minimal supervision
• Strong executive presence and ability to articulate technical security concepts in a business/risk context
• Customer-focused approach with diplomacy across teams and leadership levels
• Strong ability to prioritize using risk data from multiple inputs
• Knowledge of security and compliance frameworks (SOX, NIST CSF, ISO 27001/2, CIS Controls)
• Strong communication, stakeholder management, and influence without direct authority
• Related technical degree required

Benefits

• Time off programs
• Medical, dental, vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program