Business Information Security Officer

Company: US6469 Sysco Payroll, Division of Sysco Resources Services, LLC Sales Territory: US-TX-Houston Zip Code: 77077 Travel Percentage: 0 COMPENSATION INFORMATION: The pay range provided is not indicative of Sysco’s actual pay range but is merely algorithmic and provided for generalized comparison. Factors that may be used to determine rate of pay include specific skills, work location, work experience and other individualized factors This is a hybrid position requiring an on-site presence at our corporate headquarters in Houston, Texas, three to four days per week. Job Summary: The BISO is a dedicated security professional that is able to balance risk management and Cybersecurity requirements. The role requires business acumen, technical acumen and strong consultative skills. Business operational understanding is critical because this role will engage with business leaders and operations stakeholders to enhance understanding, identification, and management of business risks. Duties and Responsibilities: Provide independent and objective oversight and monitoring for the implementation of Cybersecurity across Sysco’s operating companies. Direct and manage Security Leads across regions. Translate Policy(s) and Standards set forth by the Cybersecurity Risk and Compliance Management Team into the environment. Increase awareness and foster accountability for security across the enterprise. Facilitate bidirectional communication between operations teams globally and enterprise security while advocating for both in a balanced manner. Escalate risks and exceptions to Cybersecurity Risk and Compliance Management Team and Change Management. Participate in and assist with security incident readiness and response training & awareness including supporting cybersecurity incident response activities. Oversee responsibilities for both security and business continuity (governance, reporting, compliance, risk assessments, etc.). Education Preferred: Education (Bachelor’s Degree or above) related to Computer Science, Cybersecurity, Information Technology, or related fields Experience Required: 10+ years experience of Cybersecurity and or information risk management Knowledge and understanding of the design of the operational systems and operations environments knowledge of application and product system development lifecycle and tools and appsec protocols. Understand applications running in the operations environment and the resulting network traffic In-depth understanding of cybersecurity solutions and requirements within the food and service industry Excellent communication skills, with an ability to tailor and engage communication across all levels of the organization Licenses/Certifications Preferred: Certified Information on Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), GIAC Response and Industrial Defense (GRID) Language Requirements: Fluency in written and spoken English. Physical Demands: Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job. BENEFITS INFORMATION: For information on Sysco’s Benefits, please visit OVERVIEW: Sysco is the global leader in foodservice distribution. With over 71,000 colleagues and a fleet of over 13,000 vehicles, Sysco operates approximately 333 distribution facilities worldwide and serves more than 700,000 customer locations. We offer our colleagues the opportunity to grow personally and professionally, to contribute to the success of a dynamic organization, and to serve others in a manner that exceeds their expectations. We’re looking for talented, hard-working individuals to join our team. Come grow with us and let us show you why Sysco is at the heart of food and service. AFFIRMATIVE ACTION STATEMENT: Applicants must be currently authorized to work in the United States. We are proud to be an Equal Opportunity and Affirmative Action employer, and consider qualified applicants without regard to race, color, creed, religion, ancestry, national origin, sex, sexual orientation, gender identity, age, disability, veteran status or any other protected factor under federal, state or local law. This opportunity is available through Sysco Corporation, its subsidiaries and affiliates.