Business Information Security Officer (BISO) Engineer, 21888

We’re seeking a Business Information Security Officer (BISO) Engineer to serve as an embedded cybersecurity partner for an assigned business unit. In this role, you’ll connect enterprise security strategy with day-to-day business and operational technology (OT) environments-helping teams assess risk, implement security controls, and prioritize remediation.

You’ll work closely with IT, OT, business stakeholders, and enterprise security teams to support security programs across applications, infrastructure, and OT environments., * Serve as the primary cybersecurity liaison for assigned business unit(s), translating enterprise security policies into practical controls and procedures.

• Conduct and support risk assessments, vulnerability management reviews, and security posture evaluations.
• Lead or support security initiatives involving web application firewalls (WAF), next-generation firewalls (NGFW), identity and access management, endpoint protection, and cloud security.
• Represent the business unit in change management and security governance forums.
• Coordinate with enterprise security platforms, including Splunk, Palo Alto/Panorama, and Imperva Cloud WAF, to support monitoring and policy enforcement.
• Support M&A cybersecurity integration, including network segmentation, firewall onboarding, and security baseline validation.
• Develop and maintain security policies, runbooks, risk acceptance memos, and remediation plans.
• Present risk posture and program status to technical teams, business partners, and senior management.

• 5+ years of experience in cybersecurity engineering, architecture, or risk management.
• Hands-on experience with WAF, NGFW, SIEM, or vulnerability management platforms.
• Strong understanding of NIST CSF, CMMC, or comparable security frameworks.
• Proven ability to manage cross-functional security programs with minimal oversight.
• Strong communication skills and ability to work with both technical and leadership stakeholders., * Experience in energy, utilities, or OT/ICS environments.
• Familiarity with Imperva Cloud WAF, Illumio, Splunk, or Palo Alto/Panorama.
• CISSP, CISM, or equivalent certification.
• Experience supporting M&A cybersecurity integration.

eam leadership.

• 401(k)
• Dental insurance
• Life insurance
• Vision insurance