Business Information Security Officer

Ciena is committed to our people-first philosophy. Our teams enjoy a culture focused on prioritizing a personalized and flexible work environment that empowers an individual’s passions, growth, wellbeing and belonging. We’re a technology company that leads with our humanity—driving our business priorities alongside meaningful social, community, and societal impact.

Why Ciena:

• We are big proponents of life-work integration and provide the flexibility and tools to make it a reality with remote work and potentially, part-time work.
• We believe an inclusive, diverse, and barrier-free work environment makes for empowered and committed employees.
• We recognize the importance of well-being and offer programs and benefits to support and sustain the mental and physical health of our employees and their families and also offer a variety of paid family leave programs.
• We are committed to employee development, offering tuition reimbursement and a variety of in-house learning and mentorship opportunities.
• We know that financial security is important.  We offer competitive salaries and incentive programs, RSU’s (job level specific) and an employee share option purchase program.
• We realize time away to recharge is important.  We offer flexible paid time off!
• Great work deserves recognition. We have a robust recognition program, with ongoing and enhanced awards for exemplary performance.

How You Will Contribute:

Reporting to the Director, Business Security Partners, as the Business Information Security Officer (BISO), you’ll be the liaison between Ciena’s Security program and the Ciena Government Solutions (CGSI) business. Your main responsibility is to oversee cybersecurity and assurance within your assigned region or business unit. Working closely with our Chief Information Security Officer, you will play a crucial role in meeting the Security & Compliance needs of one of our most dynamic business units. Your expertise and guidance are essential in ensuring that all processes and systems meet our company's security risk tolerance. As a trusted advisor, you will gather business requirements and provide advice and oversight to ensure compliance with security risk tolerance for processes and systems. You will also set expectations for regional/business security postures and identify opportunities to enhance security against future trends and threats.

You will collaborate closely with product engineering, operations, Public Sector compliance, and Government Accreditation teams to monitor and report on security compliance. Your goal is to help business units achieve their objectives without compromising security. You will take a proactive approach by assessing security posture, providing expert guidance, and developing solutions that meet the stringent standards of United States government agencies.

• Bridge the gap between the Enterprise Security organization and Ciena's government solutions business
• Collaborate closely with product security, other security functions in the CISO organization, and IT operations.
• Collaborate with Legal compliance and Government Accreditation teams to oversee and report on security compliance
• Build and maintain trusted relationships with Ciena government solutions sales, services and operations teams
• Partner with the government business stakeholders in implementation and maintenance of CMMC (Cybersecurity Maturity Model Certification) compliance
• Manage multiple impactful and complex security projects, aligning them with internal security requirements
• Be actively informed and engaged in security projects across the business.
• Enforce the strong security culture set forth by the CISO, ensuring uniformity across security leadership, business units and employees.
• Ensure business projects are focused on cybersecurity from the beginning.
• In conjunction with security and business leaders, define key performance indicators (KPIs) and metrics aligning with business initiatives and deliver them to non-technical teams in terms that are accessible and comprehensible.
• Provide motivation to business units to adopt cybersecurity controls. 
• Remove complexity and obstacles that hinder efficient security controls enterprise wide.
• Build relationships with business units to deliver security-by-design controls incorporated into projects, architecture, infrastructure and applications.
• Stay abreast of new laws, regulations and standards, and assess their impact to the business.
• Verify security content training initiatives and internal/external communication are conducted regularly.
• Identify opportunities for the business unit to au