Business Information Security Officer (BISO)
Manager: EMEA
Job Title: Business Information Security Officer (BISO)
Manager: EMEA
Location: EMEA — Fully Remote
Travel: Occasional (estimated 2–5 trips/year for client site audits)
About Foundever: FoundeverTM is a global leader in customer experience, supporting 750+ of the world's leading brands with 170,000 associates across 45+ countries. Our Global Security team sits at the heart of how we protect clients, people, and operations — and the BISO function is where security meets business strategy.
About the Role:
As BISO Manager, you'll be the primary security point of contact for enterprise clients across the EMEA region, representing Foundever's security posture throughout the full client lifecycle — from contract reviews and security questionnaires through to audits, implementations, and incident coordination. You'll manage a small team of Security Analysts and work closely with Legal, IT, Operations, and Business Development. This is a governance and client-engagement role, not a technical engineering position. The ideal candidate is as comfortable in a client meeting as they are reviewing a security framework.
What You'll Do:- Client-Facing Security & Governance (40%)Serve as the primary EMEA security contact for enterprise clients across all stages of the engagement lifecycle
- Lead and respond to client security questionnaires, contract security language reviews, and SOW assessments
- Represent Foundever's security posture in client meetings, pre-sales calls, and RFP responses — collaborating with Legal, Sales, and IT Solutions
- Provide timely, accurate security responses to client inquiries, ensuring alignment with Foundever's security policies and contractual obligations
- Audit & Risk Management (25%)Lead or support client-requested and internal security audits — preparing evidence, presenting findings, and managing follow-upMonitor and close CAPA items and Site Security Questionnaire (SSQ) findings
- Conduct physical security reviews on a project basis, triggered by specific client audit requirements or contract obligations (not a routine daily function)
- Support the Fraud Investigation team by contributing security evidence, logs, and technical findings — BISO supports investigations, it does not lead them
- Implementation & Change Management (15%)Participate in Enterprise Change Management reviews, assessing security risks from client-requested changes
- Support new client implementations by identifying and mitigating security risks during project setup
- Team Leadership (10%)Manage and mentor a small team of BISO Security Analysts
- Delegate, guide, and support the professional development of direct reports
- Cross-functional Security Support (10%)Advise Operations, HR, Legal, and Business Development on security best practices and policy compliance
- Contribute to Foundever-wide security initiatives and awareness programs as needed
What We're Looking For:- (Must-Have)3–5 years of experience in cybersecurity, IT risk governance, or a client-facing security role (e.g., security consulting, technical account management, IT project management)
- Working knowledge of key frameworks: ISO 27001, GDPR, PCI-DSS, NIST, DORA — deep certification not required, solid understanding is essential
- Proven experience in client-facing security audit participation and contract reviews
- Confident communicator — able to present security topics clearly to enterprise clients and senior stakeholders
- Fluent English (written and spoken — client-facing standard)
German language skills — highly valued; our German market clients regularly submit documentation in German and require security engagement in their language. This is a key market need, not a preference.
Nice to Have:
CertificationsCISSP, CISM, or CISAPeople management experienceBPO, managed services, or multi-client environment background
