Business Information Security Officer (BISO)

An extraordinarily talented group of individuals work together every day to drive TNS' success, from both professional and personal perspectives.  Come join the excellence!

Overview

The Business Information Security Officer (BISO) will serve as the primary point of contact between the TNS Security Department, their shared security service offerings and their assigned business unit(s). The BISO is responsible for maintaining a strategic relationship with the specific business unit they are aligned to. This strategic move to incorporate BISOs by TNS will ensure that security is incorporated into the culture of the business unit and the business unit’s risk appetite falls within TNS’ risk tolerance level. The (BISO) will play a pivotal role in ensuring that security strategies align with TNS' Information Security Management System (ISMS), regulatory requirements, and business objectives.The BISO collaborates closely with the Chief Security Officer (CSO), PAY General Manager (GM), and other business leaders to understand the strategic direction of the PAY Market and the payments industry, ensuring security initiatives support overall business growth.
The BISO will help leadership define the appropriate risk appetite for the PAY Market, while ensuring that risk tolerance is maintained within acceptable limits.

Responsibilities

The BISO fulfills the following tasks:

• Act as a subject matter expert (SME) between the TNS Security Department and the business unit in the management of business unit security risks.
• Identify resource requirements (e.g., security architects, security engineers, security analysts) to achieve business unit outcomes
• Continuously monitor industry trends to anticipate and plan for future impact of security risk on the business unit. 
• Follow all risk remediation protocols to ensure issues are mitigated, risks are accounted for, and exceptions are tracked in accordance with TNS’ Security’s risk management frameworks, policies and standards.
• Work with business unit to align funding requirements with strategic initiatives  
• Participate in Security, Operations and business-related councils or working and steering groups as necessary
• Educate stakeholders on security-related matters to increase awareness and improve culture
• Develop an understanding of business goals and reframe security risk discussions in business terms
• Constructively engage business partners regarding security issues
• Establish security risk ownership and accountability within the business unit
• Inform business partners of the security risk implications of critical decisions by combining empirical analysis with expert judgment to assess business decisions
• Challenge business partners’ assumptions about value drivers and present an alternate perspective 
• Influence business partners’ perceptions of success where applicable

Key Responsibilities:

• Risk Management: As a subject matter expert in payments security, the BISO will identify key risks—such as fraud, data breaches, and system outages—within the TNS risk management framework. They will work with the Security Department to implement controls that mitigate these risks while supporting secure payment processing.
• Regulatory Compliance: The BISO ensures adherence to payment regulations and compliance with frameworks such as PCI DSS, DORA, and GDPR. This requires an in-depth understanding of laws governing data privacy, financial services, and payment security. They will collaborate with the Information Security Group to provide compliance evidence for audits and ensure payment systems meet all required security certifications.
• Security Technologies: The BISO partners with the Security Engineering teams to implement security technologies that safeguard payment systems, including encryption, tokenization, multi-factor authentication (MFA), and secure coding practices.
• Incident Response: The BISO ensures incident response plans are robust and provides quick responses to breaches or security incidents. This includes identifying when external auditors are required and ensuring a comprehensive response process.
• Cross-functional Collaboration: The BISO fosters collaboration across departments, including Legal, Compliance, IT, Operations, Development and Product teams, to ensure security is integrated throughout the payments lifecycle. Additionally, they educate both internal and external stakeholders on security best practices.
• Third-Party Risk Assessments: The BISO ensures all third-party providers—such as payment processors, cloud services, and other service partners—comply with security standards. Regular assessments and audits are conducted to manage risks associated with third-party vendors.
• Employee Training: