← Back to all jobs
Foundever

Business Information Security Officer (BISO) Manager - EMEA (Remote, Any Locatio

Foundever

50d ago

0ManagementSpainhimalayas
InfosecSecurity-GovernanceCybersecurityBusiness-Information-Security-OfficerIT-Risk-ManagementDirector-Of-Business-Information-SecurityInformation-Security-ManagerCybersecurity-Governance-Risk-and-Compliance-ManagerManager

Job Description

Job Title: Business Information Security Officer (BISO) Manager - EMEALocation: EMEA — Fully RemoteTravel: Occasional (estimated 2–5 trips/year for client site audits)About Foundever Foundever™ is a global leader in customer experience, supporting 750+ of the world's leading brands with 170,000 associates across 45+ countries. Our Global Security team sits at the heart of how we protect clients, people, and operations — and the BISO function is where security meets business strategy.About the RoleAs BISO Manager, you'll be the primary security point of contact for enterprise clients across the EMEA region, representing Foundever's security posture throughout the full client lifecycle — from contract reviews and security questionnaires through to audits, implementations, and incident coordination.You'll manage a small team of Security Analysts and work closely with Legal, IT, Operations, and Business Development. This is a governance and client-engagement role, not a technical engineering position. The ideal candidate is as comfortable in a client meeting as they are reviewing a security framework.What You'll DoClient-Facing Security & Governance (40%)1) Serve as the primary EMEA security contact for enterprise clients across all stages of the engagement lifecycle2) Lead and respond to client security questionnaires, contract security language reviews, and SOW assessments3) Represent Foundever's security posture in client meetings, pre-sales calls, and RFP responses — collaborating with Legal, Sales, and IT Solutions4) Provide timely, accurate security responses to client inquiries, ensuring alignment with Foundever's security policies and contractual obligationsAudit & Risk Management (25%)1) Lead or support client-requested and internal security audits — preparing evidence, presenting findings, and managing follow-up2) Monitor and close CAPA items and Site Security Questionnaire (SSQ) findings3) Conduct physical security reviews on a project basis, triggered by specific client audit requirements or contract obligations (not a routine daily function)4) Support the Fraud Investigation team by contributing security evidence, logs, and technical findings — BISO supports investigations, it does not lead themImplementation & Change Management (15%)1) Participate in Enterprise Change Management reviews, assessing security risks from client-requested changes2) Support new client implementations by identifying and mitigating security risks during project setupTeam Leadership (10%)1) Manage and mentor a small team of BISO Security Analysts2) Delegate, guide, and support the professional development of direct reportsCross-functional Security Support (10%)1) Advise Operations, HR, Legal, and Business Development on security best practices and policy compliance2) Contribute to Foundever-wide security initiatives and awareness programs as neededWhat We're Looking For (Must-Have)1) 3–5 years of experience in cybersecurity, IT risk governance, or a client-facing security role (e.g., security consulting, technical account management, IT project management)2) Working knowledge of key frameworks: ISO 27001, GDPR, PCI-DSS, NIST, DORA — deep certification not required, solid understanding is essential3) Proven experience in client-facing security audit participation and contract reviews4) Confident communicator — able to present security topics clearly to enterprise clients and senior stakeholders5) Fluent English (written and spoken — client-facing standard)6) German language skills — highly valued; our German market clients regularly submit documentation in German and require security engagement in their language. This is a key market need, not a preference.Nice to Have Certifications: 1) CISSP, CISM, or CISA2) People management experience3) BPO, managed services, or multi-client environment backgroundOriginally posted on Himalayas