Sr Manager Business Information Security Officer

Job Description:
Strategic Cyber Leadership & Governance
Serve as a trusted security advisor to business unit leadership, providing clear guidance on cyber threats, control effectiveness, resilience priorities and overall security posture
Partner with Global Cyber Security to ensure alignment with enterprise-wide security standards, policies, and emerging threat intelligence
Establish and lead business unit cyber health reporting, risk reviews and updates for business unit leadership and global cyber security
Promote cyber security as a business enabler for safe growth, innovation, operational resilience and client trust
Risk & Control Management
Provide oversight of the business unit cyber risk register, ensuring material risks, control gaps and vulnerability themes are identified, assessed, prioritized and actively managed
Drive remediation of high-priority cyber risks and security issues in partnership with technology, engineering, architecture and operational stakeholders
Oversee cyber hygiene control implementation, that it is effective and compliance assessments are aligned with the business operations
Translate technical findings, threat intelligence and control concerns into clear business impact and actionable recommendations for leadership
Partner with security architecture and cyber engineering teams to build DXC's baseline security controls into products, services, technology changes and transformation initiatives
Engage early in business strategy, change, and delivery forums to proactively identify cyber security requirements
Audit, Compliance & External Engagement
Act as the senior focal point of contact for cyber-related audits, regulatory examinations, corporate security reviews and control assessments
Oversee audit-ready evidence, management responses and remediation of security findings, demonstrating compliance with cyber quality program standards and regulatory expectations
Engage with clients and external stakeholders as required on cyber security posture, control environment, resilience capabilities and risk management practices of the company
Education & Foundational Experience
Bachelor's degree in computer science, information security, cybersecurity, or related discipline, or equivalent professional experience (advanced degree preferred)
Minimum 12+ years of experience in information security, cyber risk management, or related technology domains
Professional Expertise
Senior-level experience in cyber security leadership and cyber risk management within complex, highly regulated environments
Deep knowledge of cyber threats, security controls, vulnerability management, identity and access management, incident response, security architecture and operational resilience
Strong understanding of cyber risk governance, regulatory expectations, audit engagement, issue management and GRC tools and platforms
Demonstrated experience with security program maturity models, control frameworks (NIST, ISO 27001, CIS Controls) and metrics-driven security management
Proven ability to influence and advise the business on complex security and risk matters with clarity and credibility, supported by excellent written and verbal communication skills
Track record of translating technical cyber issues into business impact and risk-based recommendations
Ability to operate effectively in fast-paced, complex, matrix environments with multiple stakeholders
Track record of building and scaling security programs across multiple business units or geographies
Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300.
Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.
Postings Link
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.

Skills
Risk Management