Senior BISO Engineer (Cybersecurity)

The BISO (Business Information Security Officer) Engineer serves as an embedded cybersecurity practitioner within a assigned business unit, bridging the gap between enterprise security strategy and day-to-day operational technology environments. This role partners closely with IT, OT, and business stakeholders to identify risk, drive remediation, and translate security requirements into actionable programs.Key ResponsibilitiesServe as the primary cybersecurity liaison for assigned business unit(s), translating enterprise security policies into unit-specific controls and proceduresConduct and support risk assessments, vulnerability management reviews, and security posture evaluations across applications, infrastructure, and OT environmentsLead or support security initiatives including WAF/firewall configurations, identity & access management reviews, endpoint protection, and cloud security postureRepresent the business unit in change management and security governance forumsCoordinate with enterprise SIEM (Splunk), network security (Palo Alto/Panorama), and application security platforms (e.g., Imperva Cloud WAF) to ensure appropriate monitoring and enforcementSupport M&A integration activities including network segmentation, firewall onboarding, and security baseline validationDevelop and maintain security documentation: policies, runbooks, risk acceptance memos, and remediation plansEngage stakeholders across technical and leadership levels; present risk posture and program status to senior management.Required:5+ years in cybersecurity engineering, architecture, or risk managementHands-on experience with WAF, NGFW (Palo Alto preferred), SIEM, or vulnerability management platformsStrong understanding of NIST CSF, CMMC, or equivalent frameworksProven ability to manage cross-functional security programs with minimal oversightPreferred:Experience in energy, utilities, or OT/ICS environmentsFamiliarity with Imperva Cloud WAF, Illumio, Splunk, or PanoramaCISSP, CISM, or equivalent certificationExperience supporting M&A cybersecurity integration