Senior Manager Business Information Security Officer

Job Description:

Strategic Cyber Leadership & Governance

• Serve as a trusted security advisor to business unit leadership, providing clear guidance on cyber threats, control effectiveness, resilience priorities and overall security posture
• Partner with Global Cyber Security to ensure alignment with enterprise-wide security standards, policies, and emerging threat intelligence
• Establish and lead business unit cyber health reporting, risk reviews and updates for business unit leadership and global cyber security
• Promote cyber security as a business enabler for safe growth, innovation, operational resilience and client trust

Risk & Control Management

• Provide oversight of the business unit cyber risk register, ensuring material risks, control gaps and vulnerability themes are identified, assessed, prioritized and actively managed
• Drive remediation of high-priority cyber risks and security issues in partnership with technology, engineering, architecture and operational stakeholders
• Oversee cyber hygiene control implementation, that it is effective and compliance assessments are aligned with the business operations
• Translate technical findings, threat intelligence and control concerns into clear business impact and actionable recommendations for leadership
• Partner with security architecture and cyber engineering teams to build DXC's baseline security controls into products, services, technology changes and transformation initiatives
• Engage early in business strategy, change, and delivery forums to proactively identify cyber security requirements

Audit, Compliance & External Engagement

• Act as the senior focal point of contact for cyber-related audits, regulatory examinations, corporate security reviews and control assessments
• Oversee audit-ready evidence, management responses and remediation of security findings, demonstrating compliance with cyber quality program standards and regulatory expectations
• Engage with clients and external stakeholders as required on cyber security posture, control environment, resilience capabilities and risk management practices of the company. 

Education & Foundational Experience

• Bachelor's degree in computer science, information security, cybersecurity, or related discipline, or equivalent professional experience (advanced degree preferred)
• Minimum 12+ years of experience in information security, cyber risk management, or related technology domains.

Professional Expertise

• Senior-level experience in cyber security leadership and cyber risk management within complex, highly regulated environments
• Deep knowledge of cyber threats, security controls, vulnerability management, identity and access management, incident response, security architecture and operational resilience
• Strong understanding of cyber risk governance, regulatory expectations, audit engagement, issue management and GRC tools and platforms
• Demonstrated experience with security program maturity models, control frameworks (NIST, ISO 27001, CIS Controls) and metrics-driven security management
• Proven ability to influence and advise the business on complex security and risk matters with clarity and credibility, supported by excellent written and verbal communication skills
• Track record of translating technical cyber issues into business impact and risk-based recommendations
• Ability to operate effectively in fast-paced, complex, matrix environments with multiple stakeholders
• Track record of building and scaling security programs across multiple business units or geographies

Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300.

Full-time hires are eligible to participate in the DXC benefit program.  DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

If you are an applicant from the United States, Guam, or Puerto Rico

DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.

We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for theFederal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.

Postings Link

Disability Accommodations

If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us viaemail.

Please note: DXC will respond only to requests for accommodations due to a disability.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.