The BISO’s primary responsibility is to ensure that Allegis Global Solutions, Inc.’s (AGS) information security and data privacy initiatives support the global business strategy while complying with industry best practices, cybersecurity frameworks, such as NIST Cybersecurity (CSF) and Privacy Frameworks and ISO27001, and in alignment with the parent company’s policies and standards. In conjunction with the Head of Global Information Security of Allegis Group, Inc., the parent company, the AGS BISO will provide vision and leadership for developing and supporting information security and data privacy initiatives in a ‘federated’ environment (at an operating company level in concert with a shared services corporate model) and  will oversee and direct the implementation of controls designed to protect the confidentiality, integrity and availability of the data that AGS processes internally and on behalf of its customers. This individual is also responsible for evaluating, auditing and making recommendations regarding existing business operations and systems, protecting against security and privacy breaches and vulnerabilities, while directing the administration and education of security policies, activities and standards. Information security and data privacy functions align to the Risk Team managed by the AGS Global Director of Risk and Compliance.Key Responsibilities:Strategy & PlanningOn an ongoing basis, evaluate the information security and data privacy posture for AGS and provide a regular update to the Global Director of Risk and Compliance as well as make recommendations for future state to address evolving business needs and minimize risk to the organization.Participate as a member of the global enterprise risk team in governance processes of the organization’s security and privacy strategies.Recommend and implement changes in security and data privacy policies and practices in accordance with changes in local, federal or international regulation.Develop and communicate security and privacy strategies and plans to executive team, staff, partners, customers and stakeholders.Remain informed on trends and issues in the security industry, including current and emerging technologies. Advise, counsel and educate executive and leadership teams on their relative importance and financial impact.Operational ManagementAct as advocate and primary liaison for AGS’ security vision via regular written and in-person communications with executives, leadership and end users.Participate in customer and vendor contract review/negotiations on information security and data privacy. Provide training and guidance in conjunction with the legal department on these topics periodically.Supervise recruitment, development, retention and organization of security and privacy staff in accordance with AGS budgetary objectives and personnel policies.Oversee responses to customer security questionnaires and liaise with AGS program teams and customers, as needed.Oversee the AGS Security Incident Response Process (SIRP) and ensure alignment with the Allegis Group Information Security team.In coordination with a third-party auditor, oversee security certification audits such as SOC1/SOC2 Type II and ensure controls are working effectively.Work closely with Allegis Group IS and Information Security on corporate technology development to fully secure information, computer, network and processing systems.Review, educate and enforce information security policies.Ensure that facilities, premises and equipment of the corporate headquarters as well as local and global remote offices adhere to all applicable laws and regulations.In conjunction with Allegis Group IS, Information Security and independently as needed, providing resolution to security problems in a cost-effective manner.Promote and oversee strategic security relationships between internal resources and external entities including government, vendors and partner organizations.Coordinate associated activities with employee/contractor end of assignment/de-provisioning project solutions.