Business Information Security Officer (MEI) - BISO

About the role

Fugro, a global geo-data company, is looking for a Business Information Security Officer (MEI) (BISO) in Navi Mumbai. The role supports Fugro's digitalisation journey by improving its information security posture, covering both operational and governance aspects. It works with project managers, business analysts, architecture, compliance and support teams to manage information security risks and reduce them to acceptable levels.

Key responsibilities

• Identify high-risk areas and support business-critical projects and initiatives.
• Ensure Fugro information security standards are followed and act as an advisor on policies, standards and procedures.
• Manage major information security incidents in the region with the IT teams and the Security Operations Centre, and help remediate regional vulnerabilities.
• Share knowledge and risk analyses to raise information security awareness across the region.
• Assess suppliers on information security maturity and advise on business continuity for MEI.
• Support data sovereignty in the region, including GDPR and client requirements for the Middle East and India, and review audit findings with management.
• Develop a toolkit to address common client information security requests and drive remediation across the region.

Required profile

• Bachelor's or Master's degree in Information Security, Information Technology or equivalent professional experience.
• 5-10 years of experience; ideal candidates have worked in both Security Operations and Governance, Risk and Compliance.
• Demonstrated experience in information security, with knowledge of common threats, vulnerabilities and standards such as ISO 27001 and NIST.
• Good stakeholder engagement, collaboration across functions, attention to detail and ownership.

Required skills

• ISO 27001, NIST and GDPR knowledge (good to have)
• Experience with external and internal auditors (good to have)
• Relevant information security certifications are a plus but not required