> Markdown version of [/jobs/ext/2610116-director-information-security-mid-market-biso](https://www.wearedevelopers.com/jobs/ext/2610116-director-information-security-mid-market-biso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director, Information Security - Mid-Market (BISO)

- **Company:** Bcd Travel USA LLC
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $150,000.0 - $170,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security
- **Published:** August 3, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=1cd92b79aecedf72

## About the Role

Extensive experience in cybersecurity, technology risk, or information assurance, including senior leadership responsibility
Strong understanding of enterprise security frameworks, risk management, and data protection requirements
Proven ability to partner with regional business leaders and translate security strategy into execution
Experience with incident response, third-party risk, and security awareness programs
Strategic, execution-oriented leader with strong communication and stakeholder influence skills
Experience supporting business-facing security in customer-driven environments
CISSP, CISM, CRISC, or equivalent certifications preferred

## Description

As the Director, Business Information Security Officer (BISO), you will serve as a security leader assigned to oversee operations for BCD's Mid-Market customer and operating segment. You will work closely with Mid-Market business leadership to translate enterprise security strategy into operational execution. You will be responsible for embedding a culture of security, identifying and managing risks, and driving initiatives that enable the region to operate securely, meet customer expectations, and support business growth with agility. This role operates as part of BCD's global BISO engagement model, ensuring consistent risk visibility and governance while tailoring execution to regional business needs., Serve as the security liaison building strong partnerships with senior regional leadership
Translate enterprise-wide security strategy into actionable, business-aligned initiatives across Mid-Market
Establish consistent engagement touchpoints to ensure security remains aligned with regional operational needs
Ensure strong regional security posture through ongoing risk oversight and business-aligned improvement initiatives
Evaluate regional risks and develop mitigation plans, including third-party and partner ecosystem oversight
Lead implementation of security controls, awareness programs, and secure-by-design practices across regional change
Leverage key performance indicators to demonstrate regional security posture, progress, and continuous improvement
Partner with the Security Engagement team to support regional customer assurance needs and align with client expectations
Support regional security incident response readiness, including participation in tabletop exercises and resilience planning
Proactively address emerging regional threats, regulatory shifts, and AI-related risks to keep priorities aligned
Foster a culture of security accountability and collaboration across diverse stakeholder groups


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)