Business Information Security Officer- Digital and Industrial Solutions

Experteer Overview In this role you own the security of WSP’s externally-facing digital and industrial solutions, partnering with Digital Solutions, product, engineering and go-to-market teams to embed security-by-design. You govern the Secure SDLC, provide security architecture guidance for cloud-native and IoT/OT solutions, and lead risk, compliance and customer assurance efforts to accelerate growth with trust. Compensation / Benefits * Single point of security accountability for externally-facing products, platforms and services * Embed security-by-design and privacy-by-design across the solution lifecycle * Govern Secure SDLC / DevSecOps including threat modelling, SAST/DAST/SCA, CI/CD security, vulnerability management * Provide security architecture guidance for cloud-native, data-intensive, AI/ML and IoT/OT solutions * Identify, assess and track security risks; drive remediation and reporting to leadership * Act as security authority for bids, proposals and customer engagements * Establish and evidence security certifications and compliance (ISO/IEC 27001, SOC 2, etc.) * Manage supply-chain, third-party and open-source security including SBOM and vendor assessment * Monitor emerging technologies and translate to practical security guidance * Coordinate with Global Information Security Framework and report solution-security posture Tasks * Bachelor’s degree or equivalent * 12+ years of senior-level information security experience with product, application or cloud security exposure * Proven experience securing customer-facing products, SaaS or cloud platforms * Working knowledge of Secure SDLC/DevSecOps practices (threat modelling, SAST/DAST/SCA, CI/CD security, vulnerability management) * Cloud-native security knowledge across Azure, AWS, GCP (identity, networking, data-protection, workload security) * Familiarity with application/API/data security, encryption, authentication/authorization, PKI * Professional certifications (CISSP, CISM, CCSP, CSSLP, or cloud-security cert); governance/audit assets useful * Experience with governance frameworks (ISO/IEC 27001, NIST, SOC 2, COBIT, ITIL) * Risk management experience (analysis, mitigation, monitoring) * Knowledge of information security and privacy regulations relevant to WSP and markets served Key requirements * Medical, dental and vision coverage * Disability and life insurance * Retirement savings plan * Paid sick leave * Paid time off * Parental leave

to * Establish and evidence security certifications and compliance (ISO/IEC 27001, SOC 2, etc.) * Manage supply-chain, third-party and open-source security including SBOM and vendor assessment * Monitor emerging technologies and translate to practical security guidance * Coordinate with Global Information Security Framework and report solution-security posture Tasks * Bachelor’s degree or equivalent * 12+ years of senior-level information security experience with product, application or cloud security exposure * Proven experience securing customer-facing products, SaaS or cloud platforms * Working knowledge of Secure SDLC/DevSecOps practices (threat modelling, SAST/DAST/SCA, CI/CD security, vulnerability management) * Cloud-native security knowledge across Azure, AWS, GCP (identity, networking, data-protection, workload security) * Familiarity with application/API/data security, encryption, authentication/authorization, PKI * Professional certifications (CISSP, CISM, CCSP, CSSLP, or aaaaa products, cert); governance/audit assets useful * Experience with governance frameworks (ISO/IEC 27001, NIST, SOC 2, COBIT, ITIL) * Risk management experience (analysis, mitigation, monitoring) * Knowledge of information security and privacy regulations relevant to WSP and markets served Key requirements * Medical, dental and vision coverage * Disability and life insurance * Retirement savings plan * Paid sick leave * Paid time off * Parental leave