Director, Business Information Security Officer (BISO)

Overview

ABM (NYSE: ABM) is a leading provider of facility, engineering, infrastructure, and mobility solutions. With approximately $8.7 billion in fiscal 2025 revenue, more than 100,000 team members, over 350 offices, and more than 20,000 clients, ABM serves customers across a diverse range of industries throughout the United States and international locations.

ABM’s capabilities include facility services, engineering and infrastructure solutions, technical solutions, aviation services, manufacturing and distribution support, education services, energy solutions, HVAC and mechanical services, electrical services, janitorial services, landscaping, mission-critical solutions, parking, and mobility services. ABM provides these capabilities through stand-alone and integrated solutions designed to help clients operate safer, healthier, more sustainable, and more efficient spaces.

ABM is seeking a strategic and business-focused Cybersecurity Director, Business Information Security Officer (BISO) to serve as the primary cybersecurity advisor to business and corporate leaders within the Information Security organization. Reporting directly to the SVP and CISO, this leader will bridge cybersecurity strategy, technology risk, resilience, and business operations while helping enable growth and innovation.

The BISO serves as a trusted cybersecurity advisor to ABM’s business units and corporate functions. This individual understands cybersecurity risks, business operations, emerging technologies, and security controls and can translate complex security issues into practical business decisions.

The BISO works in partnership with business leaders, technology teams, project managers, legal and compliance teams, third parties, and subject matter experts to identify and manage risk throughout the business and technology lifecycle. The role is responsible for embedding security, privacy, resilience, and risk-management principles into business strategies, projects, processes, applications, infrastructure, and emerging-technology initiatives.

Hybrid Model: This position is an in-office role requiring work on-site four days per week. The role may require occasional travel, extended hours, or participation in incident response and resilience activities based on business needs.

Benefits: ABM offers a comprehensive benefits package.  For information about ABM’s benefits, visit ABM Employee Benefits | Staff & Management

Pay: $176,505 - $240,000 

The pay listed is the salary range for this position. Any specific offer will vary based on the successful applicant’s education, experience, skills, abilities, geographic location, and alignment with market data. You will also be eligible to participate in a company incentive or bonus program. You may be eligible to participate in a Company incentive or bonus program.

Responsibilities

What You Will Do

• Serve as the primary cybersecurity advisor to business and corporate leadership.
• Align cyber risk management with business priorities and operational objectives.
• Embed security, privacy, and resilience requirements into projects, applications, and technology solutions.
• Lead business continuity, disaster recovery, cyber recovery, and resilience planning efforts.
• Translate cybersecurity risks and metrics into actionable business insights for executives.
• Advise on AI, cloud, automation, and emerging technology risks and governance.
• Partner with Legal, Compliance, Privacy, Internal Audit, Enterprise Risk, and Technology teams.
• Champion a strong enterprise-wide culture of security awareness and accountability.

Qualifications

Required Experience

• Bachelor's degree or equivalent experience.
• Twelve or more years of experience in cybersecurity, technology risk, information security, or related disciplines.
• At least five years of experience in an operationally focused cybersecurity, information risk, technology risk, or information security role. 
• Experience advising senior business and technology leaders.
• Demonstrated experience developing or managing business impact analyses, business continuity plans, disaster recovery plans, cyber recovery plans, resilience strategies, or related testing programs.
• Experience translating business requirements and operational priorities into cybersecurity, technology risk, and resilience requirements.
• Experience leading cyber risk, governance, security, or resilience programs in a complex organization.
• Strong understanding of cloud security, IAM, data protection, security architecture, and risk management.
• Familiarity with applicable legal, regulatory, and industry requirements, including SOX, HIPAA, CPRA, GDPR, and other relevant privacy and security requirements.
• Knowledge of recognized cybersecurity and risk-management frameworks, such as NIST Cybersecurity Framework, NIST 800-53, ISO 27001, COBIT, CIS Controls, or similar frameworks.

Preferred Experience

• Master's degree in business, computer science, information security, information systems, risk management, or a related field. 
• CISSP, CISM, CRISC, CISA, CCSP, CGEIT, CBCP, MBCI, ITIL, GIAC or similar certifications.
• Experience supporting artificial intelligence (AI), machine learning (ML), automation, robotics, robotic process automation, or other emerging-technology risk initiatives. 
• Experience working with facility services, engineering, infrastructure, aviation, manufacturing, logistics, education, healthcare, or other operationally complex environments.
• Experience with GRC platforms, business continuity management systems, risk-management tools, security metrics, and reporting dashboards.
• Familiarity with third-party resilience assessments, supply-chain risk, concentration risk, and critical-service dependency mapping.

ABM is an Equal Opportunity Employer. 

ABM is committed to diversity and inclusion and encourages individuals from all backgrounds to apply.