Business Information Security Officer

Responsibilities

• Be the link between Information Security (IS) and the business.
• Serve as the dedicated and ongoing Information Security point of contact for Product and Engineering squads.
• Actively participate in team ceremonies, planning sessions and product reviews — not as an occasional guest, but as a relevant member of the conversation.
• Translate security requirements into language and context that make sense for development teams, product managers (PMs) and product leaders.
• Identify, assess, and communicate security risks clearly to non-technical stakeholders.
• Build and track risk treatment plans with the areas, prioritizing based on real business impact.
• Ensure Product and Engineering teams understand the risks they are assuming with each decision — and that those choices are made consciously.
• Act as a facilitator between squads and the IAM team for access provisioning and reviews — removing friction while maintaining necessary controls.
• Support teams in incorporating security practices throughout the development lifecycle (security by design, threat modeling, architecture reviews).
• Act as a guide on compliance and Information Security policies, with a pragmatic view of the real needs of those building the products.
• Foster a security culture that is perceived as an enabler, not an obstacle.
• Promote continuous, contextualized security awareness for Product and Engineering teams.
• Identify recurring risk patterns and propose systemic improvements, not just ad-hoc fixes.

Requirements

• Strong experience in Information Security, including roles that involved direct interaction with business, product or software engineering teams.
• Practical knowledge of risk management, Information Security policies and security frameworks (ISO 27001, NIST, etc.).
• Familiarity with software development lifecycles and agile methodologies — you need to speak the language of the teams you will support.
• Preferred: experience at technology companies or fintechs.